Servisnet Tessa — known CVE vulnerabilities

Every CVE whose affected-product data names Servisnet Tessa, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-22831 — CVSS 9.8 (critical): An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Authorization HTTP…
• CVE-2022-22832 — CVSS 9.8 (critical): An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request.
• CVE-2022-22833 — CVSS 7.5 (high): An issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information via a /js/app.js request.