Vulnerability Details CVE-2024-34336
User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.2%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2024-34336
-
cpe:2.3:a:ordat:ordat.erp:*