Approved changes feed: RSS · Atom

cpe:2.3:a:qsige:qsige:3.0.0.0:*:*:*:*:*:*:*

part: a version: 3.0.0.0 update: *

VendorQsige (4cc63b0c-1474-5210-bc26-2dacd3584c89)
ProductQsige (c610783e-b19e-585e-a789-be1e9cabce8a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4103 vulnerable 2026-06-08 06:16:11.480192 Multiple vulnerabilities in IDM Sistemas QSige
HIGH (8.8)
QSige statistics are affected by a remote SQLi vulnerability. It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure. As a prerequisite, it is necessary to log into the application.
Published: 2023-10-03T11:30:45.879Z
Updated: 2024-09-19T20:22:31.428Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4102 vulnerable 2026-06-08 06:16:11.479617 Multiple vulnerabilities in IDM Sistemas QSige
HIGH (8.8)
QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.
Published: 2023-10-03T11:29:46.537Z
Updated: 2024-09-19T20:24:32.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4101 vulnerable 2026-06-08 06:16:11.478959 Multiple vulnerabilities in IDM Sistemas QSige
HIGH (8.8)
The QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.
Published: 2023-10-03T11:26:49.190Z
Updated: 2024-09-23T17:06:19.046Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4100 vulnerable 2026-06-08 06:16:11.478458 Multiple vulnerabilities in IDM Sistemas QSige
MEDIUM (6.5)
Allows an attacker to perform XSS attacks stored on certain resources. Exploiting this vulnerability can lead to a DoS condition, among other actions.
Published: 2023-10-03T11:22:28.091Z
Updated: 2024-09-06T14:11:02.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4099 vulnerable 2026-06-08 06:16:11.477812 Multiple vulnerabilities in IDM Sistemas QSige
HIGH (7.6)
The QSige Monitor application does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.
Published: 2023-10-03T11:06:48.726Z
Updated: 2024-09-06T14:11:28.247Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4098 vulnerable 2026-06-08 06:16:11.477331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4097 vulnerable 2026-06-08 06:16:11.475877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.