Yepas develops the Digital Yepas product, a narrowly scoped offering where reported vulnerabilities center on authentication and access-control issues, including authentication bypass via alternate paths, misuse of privileged APIs, and missing authentication for critical functions. Treat this as a focused vendor profile; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Yepas over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-4702CRITICAL Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass.
This issue affects Digital Yepas: before 1.0.1. | Sep 14, 2023 | 9.8 | 29 | NO | NO |
CVE-2023-4972CRITICAL Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users.
This issue affects Digital Yepas: before 1.0.1. | Sep 14, 2023 | 9.8 | 27 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Yepas.
Media articles that mention a CVE ID that affects a product developed by Yepas — matched by CVE ID, not by vendor name.