Sechard Information Technologies vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2025-8463SecHard · Insecure Direct Object Reference Medium5.3EPSS 0.3%2025-09-17CVE Database V5CVE-2025-8463 Authorization Bypass Through User-Controlled Key vulnerability in SecHard Information Technologies SecHard allows Forceful Browsing. This issue affects SecHard: before 3.6.2-20250805. EPSS 0.3%Vulnerability SecHard Information Technologies CWE-639	CVE Database V5	2025-09-17
Critical	9.0	EPSS 0.2%	CVE-2025-2311SecHard · Incorrect Use of Privileged APIs Critical9.0EPSS 0.2%2025-03-20CVE Database V5CVE-2025-2311 Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring. This issue affects SecHard: before 3.3.0.20220411. EPSS 0.2%Vulnerability Sechard Information Technologies CWE-648	CVE Database V5	2025-03-20

Page 1 of 1