cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2022-26314,https://securityvulnerability.io/vulnerability/CVE-2022-26314,,"A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1), Mendix Forgot Password Appstore module (Mendix 7 compatible) (All versions < V3.2.2). Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to efficiently brute force passwords in specific situations.",Siemens,"Mendix Forgot Password Appstore Module,Mendix Forgot Password Appstore Module (mendix 7 Compatible)",9.8,CRITICAL,0.004749999847263098,false,,false,false,false,,false,false,2022-03-08T11:31:36.000Z,0
CVE-2022-26313,https://securityvulnerability.io/vulnerability/CVE-2022-26313,,"A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1). In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts.",Siemens,Mendix Forgot Password Appstore Module,9.8,CRITICAL,0.002899999963119626,false,,false,false,false,,false,false,2022-03-08T11:31:34.000Z,0
CVE-2021-25672,https://securityvulnerability.io/vulnerability/CVE-2021-25672,,A vulnerability has been identified in Mendix Forgot Password Appstore module (All Versions < V3.2.1). The Forgot Password Marketplace module does not properly control access. An attacker could take over accounts.,Siemens,Mendix Forgot Password Appstore Module,8.8,HIGH,0.0010400000028312206,false,,false,false,false,,false,false,2021-03-15T17:03:31.000Z,0