Italtel NetMatch-S CI 5.2.0-20211008
Approved changes feed: RSS · Atom
cpe:2.3:a:italtel:netmatch-s_ci:5.2.0-20211008:*:*:*:*:*:*:*
part: a version: 5.2.0-20211008 update: *
| Vendor | Italtel (423c267d-177a-5fba-b846-abd591ff6d97) |
|---|---|
| Product | Netmatch S Ci (6577bcd6-0338-5301-b163-8bfe65af43fc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-39813 |
vulnerable | 2026-06-08 05:47:18.819412 |
Details available
Italtel NetMatch-S CI 5.2.0-20211008 allows Multiple Reflected/Stored XSS issues under NMSCIWebGui/j_security_check via the j_username parameter, or NMSCIWebGui/actloglineview.jsp via the name or actLine parameter. An attacker leveraging this vulnerability could inject arbitrary JavaScript. The payload would then be triggered every time an authenticated user browses the page containing it.
Published: 2023-01-27T00:00:00.000Z
Updated: 2025-03-28T19:19:36.430Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39812 |
vulnerable | 2026-06-08 05:47:18.818963 |
Details available
Italtel NetMatch-S CI 5.2.0-20211008 allows Absolute Path Traversal under NMSCI-WebGui/SaveFileUploader. An unauthenticated user can upload files to an arbitrary path. An attacker can change the uploadDir parameter in a POST request (not possible using the GUI) to an arbitrary directory. Because the application does not check in which directory a file will be uploaded, an attacker can perform a variety of attacks that can result in unauthorized access to the server.
Published: 2023-01-27T00:00:00.000Z
Updated: 2025-03-28T19:20:42.666Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39811 |
vulnerable | 2026-06-08 05:47:18.818427 |
Details available
Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under NMSCI-WebGui/advancedsettings.jsp and NMSCIWebGui/SaveFileUploader. By not verifying permissions for access to resources, it allows an attacker to view pages that are not allowed, and modify the system configuration, bypassing all controls (without checking for user identity).
Published: 2023-01-27T00:00:00.000Z
Updated: 2025-03-28T17:38:58.492Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.