Approved changes feed: RSS · Atom

cpe:2.3:a:datev:eg_personal-management_system_comfort\/comfort_plus:16.1.1:p3:*:*:*:*:*:*

part: a version: 16.1.1 update: p3

VendorDatev (cff92660-b4e9-5cbb-a2db-fc3c1a098742)
ProductEg Personal Management System Comfort/Comfort Plus (bd9cec3c-1692-5aa2-b08a-7fc43ed51385)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-33387 vulnerable 2026-06-08 06:06:22.378316 Details available
A reflected cross-site scripting (XSS) vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allows attackers to steal targeted users' login data by sending a crafted link.
Published: 2023-06-22T00:00:00.000Z
Updated: 2024-12-06T15:23:22.632Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.