Advisories · Technology
MyComplianceOffice MCO.
Every CVE that names MyComplianceOffice MCO among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Arbitrary File Upload in MCO
- MyComplianceOffice MCO
- Unrestricted file upload
- CVSS 6.9 Medium
User Enumeration in MCO
- MyComplianceOffice MCO
- CWE-204
- CVSS 4.8 Medium
Stored Cross‑Site Scripting in MCO
- MyComplianceOffice MCO
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Path Disclosure and Path Traversal in MCO
- MyComplianceOffice MCO
- Path traversal
- Information disclosure
- CVSS 5.3 Medium
Unauthorized Access to Administrator ACL View in MCO
- MyComplianceOffice MCO
- Broken access control
- CVSS 6.3 Medium
Account Denial of Service in MCO
- MyComplianceOffice MCO
- Authentication bypass
- CWE-640
- CVSS 5.3 Medium
Insecure Direct Object Reference in MCO
- MyComplianceOffice MCO
- Broken access control
- CVSS 7.1 High
Privilege Escalation in MCO
- MyComplianceOffice MCO
- Privilege escalation
- Broken access control