Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:mashups_center:3.0.0.1:*:*:*:*:*:*:*

part: a version: 3.0.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMashups Center (c35ab924-b241-5bf1-8362-3d8e08aa3693)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7407 vulnerable 2026-06-08 05:07:00.739287 Details available
Cross-site request forgery (CSRF) vulnerability in Lotus Mashups in IBM Mashup Center 3.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Published: 2016-01-02T21:00:00.000Z
Updated: 2024-08-06T07:51:27.263Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7400 vulnerable 2026-06-08 05:07:00.704341 Details available
The Lotus Mashups component in IBM Mashup Center 3.0.0.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2016-01-02T21:00:00.000Z
Updated: 2024-08-06T07:51:27.335Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.