Advisories · Technology
Rox Appointment Booking.
Every CVE that names Rox Appointment Booking among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Rox Appointment Booking < 1.2.8 - Unauthenticated Internal Notes Disclosure via Service and Category REST Routes
- Rox Appointment Booking
- Information disclosure
- CVSS 5.3 Medium
Rox Appointment Booking < 1.2.8 - Unauthenticated Staff PII Disclosure via Agent REST Route
- Rox Appointment Booking
- Information disclosure
- CVSS 5.3 Medium
Rox Appointment Booking 1.0.9 - 1.2.2 - Unauthenticated Customer PII Disclosure via IDOR
- Rox Appointment Booking
- Broken access control
- CVSS 5.3 Medium
Rox Appointment Booking < 1.2.0 - Unauthenticated Price Manipulation and Payment Method Restriction Bypass
- Rox Appointment Booking
- Broken access control
- CVSS 6.5 Medium
Rox Appointment Booking < 1.2.0 - Unauthenticated Holiday Schedule Modification via REST API
- Rox Appointment Booking
- Broken access control