Approved changes feed: RSS · Atom

cpe:2.3:a:etaplighting:etap_safety_manager:1.0.0.32:*:*:*:*:*:*:*

part: a version: 1.0.0.32 update: *

VendorEtaplighting (c74befa7-cec7-54ee-a28f-d9b7ee102f18)
ProductEtap Safety Manager (076bb8f9-e5ca-5dd4-924d-92a4440b8676)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-50802 vulnerable 2026-06-08 05:52:03.598254 ETAP Safety Manager 1.0.0.32 Unauthenticated Reflected Cross-Site Scripting via Action Parameter
MEDIUM (6.1)
ETAP Safety Manager 1.0.0.32 contains a cross-site scripting vulnerability in the 'action' GET parameter that allows unauthenticated attackers to inject malicious HTML and JavaScript. Attackers can craft specially formed requests to execute arbitrary scripts in victim browser sessions, potentially stealing credentials or performing unauthorized actions.
Published: 2025-12-30T22:42:57.655Z
Updated: 2026-05-24T01:37:21.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40912 vulnerable 2026-06-08 05:48:28.302526 Details available
ETAP Lighting International NV ETAP Safety Manager 1.0.0.32 is vulnerable to Cross Site Scripting (XSS). Input passed to the GET parameter 'action' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML/JS code in a user's browser session in context of an affected site.
Published: 2022-09-28T13:50:27.000Z
Updated: 2025-05-20T20:20:26.356Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.