CVE-2021-47717: Intellichoice Eforce Software Suite

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

IntelliChoice eFORCE Software Suite 2.5.9 contains a username enumeration vulnerability that allows attackers to enumerate valid users by exploiting the 'ctl00$MainContent$UserName' POST parameter. Attackers can send requests with valid usernames to retrieve user information.

Affected products

• Intellichoice Intellichoice Eforce Software Suite: version 2.5.9.6 only

Published 2025-12-09. Last modified 2026-06-17.