CVE-2022-27969: Cynet 360

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET request sent to /WebApp/DeceptionUser/GetAllDeceptionUsers.

Affected products

• Cynet Cynet 360: before 4.5.6 (fixed in 4.5.6)

Published 2022-09-08. Last modified 2026-06-17.