VULNERABILITY INTELLIGENCE

CVE-2021-47717

EPSS probability0.36%
CISA KEVNot currently listed
Published2025-12-09
Last modified2026-06-17

Description

IntelliChoice eFORCE Software Suite 2.5.9 contains a username enumeration vulnerability that allows attackers to enumerate valid users by exploiting the 'ctl00$MainContent$UserName' POST parameter. Attackers can send requests with valid usernames to retrieve user information.

Weakness classification

  • disclosure@vulncheck.com: CWE-204

Primary references