Approved changes feed: RSS · Atom

cpe:2.3:a:spaceapplications:yacms:5.8.6:*:*:*:*:*:*:*

part: a version: 5.8.6 update: *

VendorSpaceapplications (bae17897-416d-5991-a8a7-8fc8e6e47183)
ProductYacms (efcf7a12-e95c-5a41-89f2-da0b8a32c7ce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-47311 vulnerable 2026-06-08 06:14:24.628047 Details available
An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking.
Published: 2023-11-20T00:00:00.000Z
Updated: 2024-08-02T21:09:36.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46471 vulnerable 2026-06-08 06:12:45.201804 Details available
Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer.
Published: 2023-11-20T00:00:00.000Z
Updated: 2025-06-10T13:47:30.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46470 vulnerable 2026-06-08 06:12:45.201295 Details available
Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser.
Published: 2023-11-20T00:00:00.000Z
Updated: 2024-08-02T20:45:41.932Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.