Xpand-it Write-back Manager 2.3.1
Approved changes feed: RSS · Atom
cpe:2.3:a:xpand-it:write-back_manager:2.3.1:*:*:*:*:*:*:*part: a version: 2.3.1 update: *
| Vendor | Xpand It (33ce679a-ba4a-5edd-a594-4a0372c32f06) |
|---|---|
| Product | Write Back Manager (cd108643-e07d-5cab-ac6b-bea9240aa711) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-27172 |
vulnerable | 2026-06-08 05:57:40.698162 |
Details available
Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to sign JWT tokens via a bruteforce attack.
Published: 2023-12-20T00:00:00.000Z
Updated: 2026-09-16T20:02:41.651Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27170 |
vulnerable | 2026-06-08 05:57:40.697630 |
Details available
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter.
Published: 2023-10-26T00:00:00.000Z
Updated: 2026-09-16T19:53:52.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27169 |
vulnerable | 2026-06-08 05:57:40.697314 |
Details available
Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric encryption keys for license generation and validation.
Published: 2023-09-12T00:00:00.000Z
Updated: 2026-09-16T19:56:21.967Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27168 |
vulnerable | 2026-06-08 05:57:40.696859 |
Details available
An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp file.
Published: 2024-01-19T00:00:00.000Z
Updated: 2026-09-16T19:58:59.417Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.