Approved changes feed: RSS · Atom

cpe:2.3:a:evasys:evasys:9.0:-:*:*:*:*:*:*

part: a version: 9.0 update: -

VendorEvasys (9c66e930-b033-5aae-b961-7e220fd7e38f)
ProductEvasys (33b0c2c8-6403-55bc-bd57-07ff1a37529e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-31435 vulnerable 2026-06-08 06:04:43.124499 Details available
Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and questionnaire previews) in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allow authenticated attackers to read and write to unauthorized data by accessing functions directly.
Published: 2023-05-02T00:00:00.000Z
Updated: 2025-01-30T15:09:27.045Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31434 vulnerable 2026-06-08 06:04:43.123958 Details available
The parameters nutzer_titel, nutzer_vn, and nutzer_nn in the user profile, and langID and ONLINEID in direct links, in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 do not validate input, which allows authenticated attackers to inject HTML Code and XSS payloads in multiple locations.
Published: 2023-05-02T00:00:00.000Z
Updated: 2025-01-30T16:18:18.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31433 vulnerable 2026-06-08 06:04:43.123506 Details available
A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter.
Published: 2023-05-02T00:00:00.000Z
Updated: 2025-01-30T16:21:13.775Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.