2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed

2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain act

Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for

2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in th

API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for

In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow

In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an

In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative priv