Beyondtrust Beyondinsight — known CVE vulnerabilities

Every CVE whose affected-product data names Beyondtrust Beyondinsight, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-4219 — CVSS 4.8 (medium): Prior to 23.2, it is possible to perform arbitrary Server-Side requests via HTTP-based connectors within BeyondInsight, resulting in a…
• CVE-2024-4220 — CVSS 4.3 (medium): Prior to 23.1, an information disclosure vulnerability exists within BeyondInsight which can allow an attacker to enumerate usernames.