Approved changes feed: RSS · Atom

cpe:2.3:a:opencart:opencart:4.0.2.2:*:*:*:*:*:*:*

part: a version: 4.0.2.2 update: *

VendorOpencart (f5def384-479e-584b-af09-ca24ddfc6912)
ProductOpencart (0f9ea7e5-7639-558d-b50e-fb47a083711e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/bitnami/opencart purl2cpe 2026-06-01 10:13:09.510923
pkg:github/opencart/opencart purl2cpe 2026-06-01 10:13:09.510925
pkg:sourceforge/opencart.mirror purl2cpe 2026-06-01 10:13:09.510926

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-40834 vulnerable 2026-06-08 06:11:04.661127 Details available
OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to gain access to the application via a brute force attack to the password parameter.
Published: 2023-09-12T00:00:00.000Z
Updated: 2024-09-26T14:29:50.501Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.