CVE-2007-4152

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-08-03 · updated 2026-06-16

Description

The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing and resending data from the DETAILS and PROCESS sections of a session that schedules an audit.

Affected products

Visionsoft Audit: 12.4.0.0

References

http://osvdb.org/46980
http://www.portcullis.co.uk/uplds/advisories/vareplay%2006_044.txt
http://www.securityfocus.com/bid/25153
http://osvdb.org/46980
http://www.portcullis.co.uk/uplds/advisories/vareplay%2006_044.txt
http://www.securityfocus.com/bid/25153

Get alerted when CVE-2007-4152 or the next vulnerability affects your stack