Filtered by vendor Rocketsoftware Subscriptions
Filtered by product Trufusion Enterprise Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-25027 1 Rocketsoftware 1 Trufusion Enterprise 2024-11-21 7.5 High
The Forgotten Password functionality of Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to bypass authentication and access restricted pages by validating the user's session token when the "Password forgotten?" button is clicked.
CVE-2022-25026 1 Rocketsoftware 1 Trufusion Enterprise 2024-11-21 7.5 High
A Server-Side Request Forgery (SSRF) in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sensitive resources on the internal network via a crafted HTTP request to /trufusionPortal/upDwModuleProxy.