Approved changes feed: RSS · Atom

cpe:2.3:a:escanav:escan_management_console:14.0.1400.2281:*:*:*:*:*:*:*

part: a version: 14.0.1400.2281 update: *

VendorEscanav (ab3b6d18-a4f1-5872-8902-8bcb1686d6d1)
ProductEscan Management Console (11654ebd-ea32-5e76-8d56-e6d52f81ecaa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42919 vulnerable 2026-06-08 06:45:47.109584 Details available
eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.
Published: 2024-08-20T00:00:00.000Z
Updated: 2024-09-13T12:53:20.741Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34838 vulnerable 2026-06-08 06:06:25.931796 Details available
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Description parameter.
Published: 2023-06-27T00:00:00.000Z
Updated: 2024-12-02T21:34:24.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34837 vulnerable 2026-06-08 06:06:25.931523 Details available
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a vulnerable parameter GrpPath.
Published: 2023-06-27T00:00:00.000Z
Updated: 2025-02-13T16:55:40.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34836 vulnerable 2026-06-08 06:06:25.931247 Details available
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to the Dtltyp and ListName parameters.
Published: 2023-06-27T00:00:00.000Z
Updated: 2024-12-05T19:12:42.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34835 vulnerable 2026-06-08 06:06:25.930862 Details available
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary JavaScript code via a vulnerable delete_file parameter.
Published: 2023-06-27T00:00:00.000Z
Updated: 2024-12-05T19:10:41.354Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33732 vulnerable 2026-06-08 06:06:23.387568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33731 vulnerable 2026-06-08 06:06:23.387223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33730 vulnerable 2026-06-08 06:06:23.386663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31703 vulnerable 2026-06-08 06:04:43.439447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31702 vulnerable 2026-06-08 06:04:43.438901 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.