Approved changes feed: RSS · Atom

cpe:2.3:a:netentsec:application_security_gateway:6.3:*:*:*:*:*:*:*

part: a version: 6.3 update: *

VendorNetentsec (35c6ee8a-173f-5f88-8526-1e532b39cb67)
ProductApplication Security Gateway (80464cfe-c982-57e4-85a7-8203b6011c09)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6007 vulnerable 2026-06-08 06:58:17.178426 Netentsec NS-ASG Application Security Gateway deleteiscgwrouteconf.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /protocol/iscgwtunnel/deleteiscgwrouteconf.php. The manipulation of the argument messagecontent leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268695. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-15T13:00:06.148Z
Updated: 2024-08-01T21:25:03.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5773 vulnerable 2026-06-08 06:56:17.418651 Netentsec NS-ASG Application Security Gateway deletemacbind.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/firewall/deletemacbind.php. The manipulation of the argument messagecontent leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-267456. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-09T03:00:04.420Z
Updated: 2024-08-01T21:18:06.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5772 vulnerable 2026-06-08 06:56:17.418020 Netentsec NS-ASG Application Security Gateway deleteiscuser.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown processing of the file /protocol/iscuser/deleteiscuser.php. The manipulation of the argument messagecontent leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-267455. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-09T02:00:04.646Z
Updated: 2024-08-01T21:18:07.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5590 vulnerable 2026-06-08 06:56:16.628871 Netentsec NS-ASG Application Security Gateway JSON Content uploadiscuser.php sql injection
MEDIUM (6.3)
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. This vulnerability affects unknown code of the file /protocol/iscuser/uploadiscuser.php of the component JSON Content Handler. The manipulation of the argument messagecontent leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266848. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-03T00:31:03.973Z
Updated: 2024-08-20T17:57:08.734Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5589 vulnerable 2026-06-08 06:56:16.627049 Netentsec NS-ASG Application Security Gateway sql injection
MEDIUM (6.3)
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /admin/config_MT.php?action=delete. The manipulation of the argument Mid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266847. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-03T00:00:04.785Z
Updated: 2024-08-01T21:18:06.556Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3458 vulnerable 2026-06-08 06:41:53.334259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3457 vulnerable 2026-06-08 06:41:53.333657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3456 vulnerable 2026-06-08 06:41:53.333134 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3455 vulnerable 2026-06-08 06:41:53.331340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3041 vulnerable 2026-06-08 06:41:52.263532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3040 vulnerable 2026-06-08 06:41:52.262127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2649 vulnerable 2026-06-08 06:33:31.719663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2648 vulnerable 2026-06-08 06:33:31.719268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2647 vulnerable 2026-06-08 06:33:31.718715 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2646 vulnerable 2026-06-08 06:33:31.718054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2645 vulnerable 2026-06-08 06:33:31.717643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2644 vulnerable 2026-06-08 06:33:31.717022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2330 vulnerable 2026-06-08 06:33:30.879172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2329 vulnerable 2026-06-08 06:33:30.878657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2022 vulnerable 2026-06-08 06:33:30.157821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2021 vulnerable 2026-06-08 06:33:30.156188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7094 vulnerable 2026-06-08 06:21:57.018045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5826 vulnerable 2026-06-08 06:19:44.845757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5785 vulnerable 2026-06-08 06:19:44.717882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5784 vulnerable 2026-06-08 06:19:44.717429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5700 vulnerable 2026-06-08 06:19:44.509095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5681 vulnerable 2026-06-08 06:19:44.481988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3792 vulnerable 2026-06-08 06:09:40.557024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30243 vulnerable 2026-06-08 06:02:43.942179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30242 vulnerable 2026-06-08 06:02:43.941753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.