Advisories · Technology
Nexi XPay Build.
Every CVE that names Nexi XPay Build among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handler
- Nexi XPay Build
- CWE-345
- CVSS 8.2 High
Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Completion and Order Key Disclosure
- Nexi XPay Build
- Broken access control
- CVSS 5.3 Medium
Nexi XPay Build 7.6.1 - 7.6.2 - Unauthenticated Saved Payment Token Disclosure via IDOR
- Nexi XPay Build
- Broken access control