Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 45
   CVE NVD 4h ago

   AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens (JWT).

   AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens (JWT). A remote, unauthenticated attacker could forge a well-formed JWT without a valid signature…

   CVSS 9.8 Fix available CVE-2026-125298 AsiaInfo International
2. 45
   CVE NVD 4h ago

   AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API '/bss/sysmgnt/api/'.

   AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API '/bss/sysmgnt/api/'. A remote, unauthenticated attacker could provision a new account with administrative…

   CVSS 9.8 Fix available CVE-2026-125297 AsiaInfo International

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=AsiaInfo+International&limit=100. RSS for this section: feed.xml.