Approved changes feed: RSS · Atom

cpe:2.3:a:primekey:ejbca:7.9.0.2:*:*:*:community:*:*:*

part: a version: 7.9.0.2 update: *

VendorPrimekey (c9b1cd0f-61a3-5ab5-9630-786c7c76954f)
ProductEjbca (2e4f2945-2a9a-5ff2-a876-6d728695f574)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/bitnami/ejbca purl2cpe 2026-06-01 10:12:22.949659
pkg:github/rgorosito/ejbca purl2cpe 2026-06-01 10:12:22.949660
pkg:sourceforge/ejbca purl2cpe 2026-06-01 10:12:22.949662

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40711 vulnerable 2026-06-08 05:48:28.004007 Details available
PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users.
Published: 2023-01-01T00:00:00.000Z
Updated: 2025-04-11T13:57:21.009Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.