Threats tagged 'ghsa-43pm-6h6p-qxr3'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-101145Eleveo Call Recording Software · Injection Medium5.3EPSS 0.2%2026-09-28GCVE DatabaseCVE-2026-101145 Eleveo Call Recording Software version 9.7.0 contains an LDAP injection vulnerability in the User Management component, specifically in the /callrec/userAddAction.do file. This vulnerability allows remote attackers to manipulate the Username argument to perform LDAP injection. The exploit code is publicly available, but no vendor response or patch has been provided. EPSS 0.2%Report on CVE-2026-101145 Vulnerability CWE-74 #ghsa-43pm-6h6p-qxr3	GCVE Database	2026-09-28

Page 1 of 1