Vulnerabilities > Cubecoders

DATE CVE VULNERABILITY TITLE RISK
2021-06-10 CVE-2021-34539 Exposure of Resource to Wrong Sphere vulnerability in Cubecoders AMP
An issue was discovered in CubeCoders AMP before 2.1.1.8.
network
low complexity
cubecoders CWE-668
7.2
2021-04-30 CVE-2021-31926 Incorrect Authorization vulnerability in Cubecoders AMP
AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration).
network
low complexity
cubecoders CWE-863
6.5