Approved changes feed: RSS · Atom

cpe:2.3:a:ubikasec:waap_cloud:6.5.6:-:*:*:*:*:*:*

part: a version: 6.5.6 update: -

VendorUbikasec (febc60f7-3526-57c0-9636-ed4d638f7ab7)
ProductWaap Cloud (69e805fa-e176-5dcb-9da4-5003af16c37b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-26261 vulnerable 2026-06-08 05:57:38.985922 Details available
In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15.
Published: 2023-03-08T00:00:00.000Z
Updated: 2025-03-05T18:36:13.051Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.