Vulnerabilities > Dhis2 > Dhis 2 > 2.39.1

DATE CVE VULNERABILITY TITLE RISK
2023-05-09 CVE-2023-31138 Incorrect Authorization vulnerability in Dhis2 Dhis 2
DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture.
network
low complexity
dhis2 CWE-863
6.5
6.5
2023-05-09 CVE-2023-31139 Insufficient Session Expiration vulnerability in Dhis2 Dhis 2
DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture.
network
low complexity
dhis2 CWE-613
7.5
7.5