CVE-2022-44013

PoC —

CVSS 3.1

9.1 critical

EPSS

<1%p59

Published

Dec 25, 2022 (Dec 25, 2022)

Modified

Jun 17, 2026

Description

An issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can make various API calls without authentication because the password in a Credential Object is not checked.

Vendors: simmeth
Products: lieferantenmanager
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.