Approved changes feed: RSS · Atom

cpe:2.3:a:enonic:xp:7.8.0:rc3:*:*:*:*:*:*

part: a version: 7.8.0 update: rc3

VendorEnonic (7210e690-2fdf-5262-81b1-b8b51a8faeaa)
ProductXp (fce5f74b-404d-5ce4-afa5-33f0fbe8d193)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/enonic/xp purl2cpe 2026-06-01 10:11:24.869369

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-23679 vulnerable 2026-06-08 06:29:40.254414 Enonic XP Session Fixation Vulnerability
Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. An remote and unauthenticated attacker can use prior sessions due to the lack of invalidating session attributes.
Published: 2024-01-19T20:23:03.781Z
Updated: 2026-11-08T13:59:56.953Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.