CVE-2025-12737高 8.4The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a mal…
CVE-2026-0637中 4.4When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties. This logging oc…
CVE-2025-15039緊急 9.4The Conditional Authentication (Adaptive Authentication) script does not correctly enforce the completion of all required authentication ste…
CVE-2025-14779低 3.8The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type. The on-delete cascade logic, whe…
CVE-2025-13909中 4.3The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic…