Cybelesoft Thinfinity Workspace — known CVE vulnerabilities

Every CVE whose affected-product data names Cybelesoft Thinfinity Workspace, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2024-40404 — CVSS 9.8 (critical): Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web…
• CVE-2024-40405 — CVSS 8.1 (high): Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker…
• CVE-2024-40407 — CVSS 7.5 (high): A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the…
• CVE-2024-40408 — CVSS 7.3 (high): Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section…
• CVE-2024-40410 — CVSS 4.8 (medium): Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for encryption.