Approved changes feed: RSS · Atom
cpe:2.3:a:brokerage_technology_solutions:wave_2.0:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Brokerage Technology Solutions (966e911a-5b7f-5649-b23b-2a269bb40a04) |
|---|---|
| Product | Wave 2.0 (b8509439-bb7f-528e-9b72-8bb15f93dc9c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-51560 |
vulnerable | 2026-06-08 06:52:12.455444 |
Improper Error Handling Vulnerability in Wave 2.0
This vulnerability exists in the Wave 2.0 due to improper exception handling for invalid inputs at certain API endpoint. An authenticated remote attacker could exploit this vulnerability by providing invalid inputs for “userId” parameter in the API request leading to generation of error message containing sensitive information on the targeted system.
Published: 2024-11-04T12:23:32.483Z
Updated: 2024-11-04T15:01:54.521Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51559 |
vulnerable | 2026-06-08 06:52:12.454835 |
Improper Access Control Vulnerability in Wave 2.0
This vulnerability exists in the Wave 2.0 due to improper authorization checks on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating API input parameters to gain unauthorized access and perform malicious activities on other user accounts.
Published: 2024-11-04T12:20:18.995Z
Updated: 2024-11-22T11:56:04.725Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51558 |
vulnerable | 2026-06-08 06:52:12.454337 |
Brute Force Attack Vulnerability in Wave 2.0
This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack against legitimate user OTP, MPIN or password, which could lead to gain unauthorized access and compromise other user accounts.
Published: 2024-11-04T12:15:45.323Z
Updated: 2024-11-04T15:04:26.996Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51557 |
vulnerable | 2026-06-08 06:52:12.452150 |
No Rate Limiting Vulnerability in Wave 2.0
This vulnerability exists in the Wave 2.0 due to missing rate limiting on OTP requests in an API endpoint. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoint which could lead to the OTP bombing/flooding on the targeted system.
Published: 2024-11-04T12:12:41.177Z
Updated: 2024-11-04T15:05:06.360Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51556 |
vulnerable | 2026-06-08 06:52:12.450269 |
Sensitive Information Disclosure Vulnerability in Wave 2.0
This vulnerability exists in the Wave 2.0 due to insufficient encryption of sensitive data received at the API response. An authenticated remote attacker could exploit this vulnerability by manipulating API input parameters through API request URL/payload leading to unauthorized access to sensitive information belonging to other users.
Published: 2024-11-04T12:09:30.176Z
Updated: 2024-11-22T11:44:55.206Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.