CVSS: 4.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-22455
https://notcve.org/view.php?id=CVE-2024-22455
Dell E-Lab Navigator, [3.1.9, 3.2.0], contains an Insecure Direct Object Reference Vulnerability in Feedback submission. An attacker could potentially exploit this vulnerability, to manipulate the email's appearance, potentially deceiving recipients and causing reputational and security risks. Dell E-Lab Navigator, [3.1.9, 3.2.0], contiene una vulnerabilidad de referencia directa a objetos inseguros en el envío de comentarios. Un atacante podría explotar esta vulnerabilidad para manipular la apariencia del correo electrónico, engañando potencialmente a los destinatarios y provocando riesgos para la reputación y la seguridad. Dell Mobility - E-Lab Navigator, version(s) 3.1.9, 3.2.0, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability. • https://www.dell.com/support/kbdoc/en-us/000222015/dsa-2024-073-security-update-for-mobility-e-lab-navigator-vulnerabilities • CWE-451: User Interface (UI) Misrepresentation of Critical Information CWE-639: Authorization Bypass Through User-Controlled Key •
CVSS: 8.4EPSS: 0%CPEs: 2EXPL: 0CVE-2023-44296
https://notcve.org/view.php?id=CVE-2023-44296
Dell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. A local attacker could potentially exploit this vulnerability, leading to unauthorized access to sensitive data. Successful exploitation may result in the compromise of confidential user information. Dell ELab-Navigator, versión 3.1.9, contiene una vulnerabilidad de credencial codificada. Un atacante local podría explotar esta vulnerabilidad, lo que provocaría un acceso no autorizado a datos confidenciales. • https://www.dell.com/support/kbdoc/en-us/000219558/dsa-2023-419-security-update-for-mobility-e-lab-navigator-vulnerabilities • CWE-798: Use of Hard-coded Credentials •