VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jun 7, 2017· Updated May 13, 2026

CVE-2017-7312

CVE-2017-7312

Description

An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, anyone can add a vendor account or read existing vendor account data (including usernames and passwords).

Affected products

3
  • Personifycorp/Personify3603 versions
    cpe:2.3:a:personifycorp:personify360:7.5.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:personifycorp:personify360:7.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:personifycorp:personify360:7.6:*:*:*:*:*:*:*
    • cpe:2.3:a:personifycorp:personify360:7.6.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.