CVE-2024-38742: Mbe Worldwide S.p.a Mbe Eship

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in MBE Worldwide S.P.A. MBE eShip allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MBE eShip: from n/a through 2.1.2.

Affected products

• Mbe Worldwide S.p.a Mbe Eship: up to and including 2.1.2

Published 2024-08-13. Last modified 2026-06-17.