Essity

Essity 的公开漏洞报告、类别分布与常见资产。

攻击面

弱点类别分布

• 身份认证1
• 注入与走私1
• 错误配置1
• SQL 注入1
• 跨站脚本1

主要弱点

• 存储型 XSS1
• Improper Output Neutralization for Logs1
• 错误配置1
• Missing Authentication for Critical Function1
• SQL 注入1

常见资产

• https://essity.comURL · 2
• app.essity.comURL · 1
• https://infohub.essity.com/en-gb/searchURL · 1
• https://zewa.netURL · 1

高票报告

当前状态 5 份 · 全部 5

1. 68
   Unauthenticated API allows reading, writing to and deleting any user's private chat history on ████████错误配置 · 2026-09-18 · 严重
   $0错误配置
2. 48
   Pre-authentication Stored XSS in Essity Customer-Service Pipeline via ContactApi (reCAPTCHA bypass + no rate limit)跨站脚本 · 2026-08-27 · 严重
   $0存储型 XSS
3. 42
   HTML Injection in Contact Form Email Enables Phishing via Legitimate ████████ Infrastructure注入与走私 · 2026-10-05 · 中危
   $0Improper Output Neutralization for Logs
4. 40
   Critical SQL Injection WDM API (████████)SQL 注入 · 2026-08-27 · 严重
   $0SQL 注入
5. 29
   Unauthenticated self-registration on ████████ grants full access to internal supplier procurement portal and vendor data身份认证 · 2026-10-14 · 中危
   $0Missing Authentication for Critical Function