CVE-2017-7312: Personifycorp PERSONIFY360

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, anyone can add a vendor account or read existing vendor account data (including usernames and passwords).

Affected products

• Personifycorp PERSONIFY360: version 7.5.2 only; version 7.6 only; version 7.6.1 only

Published 2017-06-07. Last modified 2026-06-17.