Every CVE whose affected-product data names Echa.europa Iuclid, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2023-26089 — CVSS 9.8 (critical): European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used for JWT signing…
CVE-2023-26546 — CVSS 8.8 (high): European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Side Template…
CVE-2024-0770 — CVSS 4.4 (medium): A vulnerability, which was classified as critical, was found in European Chemicals Agency IUCLID 7.10.3 on Windows. Affected is an unknown…