https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-31928.htmlhttps://patchthecve.com/cve/CVE-2021-31928.htmlWed, 17 Jun 2026 03:52:30 +0000HIGH 8.8: Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to escalate privileges to superadministrator. It was fixed in v2021.1.0.2.https://patchthecve.com/cve/CVE-2021-31927.htmlhttps://patchthecve.com/cve/CVE-2021-31927.htmlWed, 17 Jun 2026 03:52:30 +0000MEDIUM 4.3: An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any existing user, including users assigned to different environments and clients. It was fixed in v2021.1.0.2.https://patchthecve.com/cve/CVE-2021-31929.htmlhttps://patchthecve.com/cve/CVE-2021-31929.htmlWed, 17 Jun 2026 03:52:30 +0000MEDIUM 4.3: Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify loyalty campaigns and settings, such as fraud prevention, coupon groups, email templates, or referrals.