VULNERABILITY INTELLIGENCE
CVE-2021-47717
EPSS probability0.36%
CISA KEVNot currently listed
Published2025-12-09
Last modified2026-06-17
Description
IntelliChoice eFORCE Software Suite 2.5.9 contains a username enumeration vulnerability that allows attackers to enumerate valid users by exploiting the 'ctl00$MainContent$UserName' POST parameter. Attackers can send requests with valid usernames to retrieve user information.
Weakness classification
- disclosure@vulncheck.com: CWE-204