An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. Information disclosure can occur via an external HTTPS request.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N4cstrategies Exonaut
APP4Cstrategies21.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2025-46658CRITICAL9.8PL ✓ten sam produkt
Ujawnienie informacji przez szczegółowe komunikaty błędów w 4C Strategies Exonaut
CVE-2024-55401MEDIUM6.5ten sam produkt
An issue in 4C Strategies Exonaut before v22.4 allows attackers to execute a directory traversal.
CVE-2024-55398MEDIUM6.5ten sam produkt
4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.
CVE-2024-55399MEDIUM6.5ten sam produkt
4C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery (SSRF).
CVE-2024-55402MEDIUM5.3ten sam produkt
4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.