Approved changes feed: RSS · Atom

cpe:2.3:a:sesami:cash_point_\&_transport_optimizer:6.3.8.6.718:*:*:*:*:*:*:*

part: a version: 6.3.8.6.718 update: *

VendorSesami (87bb1cc4-dc25-5d1b-8ebf-87594c411e0a)
ProductCash Point & Transport Optimizer (1555134d-4341-5a25-b2d2-b3517e70ed6d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-31302 vulnerable 2026-06-08 06:04:42.496940 Details available
Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to execute arbitrary code via the Teller field.
Published: 2023-12-29T00:00:00.000Z
Updated: 2024-08-27T15:23:51.187Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31301 vulnerable 2026-06-08 06:04:42.496439 Details available
Stored Cross Site Scripting (XSS) Vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the Username field of the login form and application log.
Published: 2023-12-29T00:00:00.000Z
Updated: 2024-08-02T14:53:30.852Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31300 vulnerable 2026-06-08 06:04:42.496192 Details available
An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via transmission of unencrypted, cleartext credentials during Password Reset feature.
Published: 2023-12-29T00:00:00.000Z
Updated: 2025-04-17T20:25:03.643Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31299 vulnerable 2026-06-08 06:04:42.495850 Details available
Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code via the Barcode field of a container.
Published: 2023-12-29T00:00:00.000Z
Updated: 2024-08-02T14:53:30.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31298 vulnerable 2026-06-08 06:04:42.495501 Details available
Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user.
Published: 2023-12-29T00:00:00.000Z
Updated: 2024-09-03T19:55:59.448Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31297 vulnerable 2026-06-08 06:04:42.494918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31296 vulnerable 2026-06-08 06:04:42.493425 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31295 vulnerable 2026-06-08 06:04:42.493088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31294 vulnerable 2026-06-08 06:04:42.492737 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31293 vulnerable 2026-06-08 06:04:42.492470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31292 vulnerable 2026-06-08 06:04:42.491965 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.