Approved changes feed: RSS · Atom

cpe:2.3:a:marvalglobal:msm:15.0:*:*:*:*:*:*:*

part: a version: 15.0 update: *

VendorMarvalglobal (6fe20c97-2b35-5e94-b95c-ba1e14656c96)
ProductMsm (3a952004-e8a3-59fc-8dc3-1153f6667e5a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-33284 vulnerable 2026-06-08 06:06:22.176319 Details available
Marval MSM through 14.19.0.12476 and 15.0 has a Remote Code Execution vulnerability. A remote attacker authenticated as any user is able to execute code in context of the web server.
Published: 2023-06-07T00:00:00.000Z
Updated: 2025-01-07T16:03:11.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33282 vulnerable 2026-06-08 06:06:22.175222 Details available
Marval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials. A remote attacker is able to login and create a valid session. This makes it possible to make backend calls to endpoints in the application.
Published: 2023-06-07T00:00:00.000Z
Updated: 2025-01-07T14:34:44.122Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.