CVE-2026-1694

Katalog CVE

CVSS 4.3 · Medium EPSS 0,17%

Kerentanan Insertion of Sensitive Information Into Sent Data pada arcinfo pcvue. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information about the server configuration.

Rincian

Terbit di NVD

26 Februari 2026

Terakhir diubah

9 Juli 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-201: Insertion of Sensitive Information Into Sent Data

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 6,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.pcvue.com/security/#SB2026-2 advisory vendor