VULNERABILITY INTELLIGENCE

CVE-2021-36723

CVSS score6.1 MEDIUM
EPSS probability0.55%
CISA KEVNot currently listed
Published2021-12-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Description

Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the service.

Weakness classification

  • cna@cyber.gov.il: CWE-359
  • nvd@nist.gov: CWE-200

Primary references