Approved changes feed: RSS · Atom

cpe:2.3:a:sybase:easerver:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

VendorSybase (fd5456a1-48f2-5560-bcfd-28feee5f84a9)
ProductEaserver (1b26e048-3e43-5eb6-83b1-5bcd5e06df53)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4340 vulnerable 2026-06-03 14:32:18.432478 Details available
Cross-site scripting (XSS) vulnerability in Sybase EAServer before 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-08-15T21:00:00.000Z
Updated: 2024-09-17T02:11:26.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1861 vulnerable 2026-06-03 14:26:22.339023 Details available
Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
Published: 2005-06-28T04:00:00.000Z
Updated: 2024-09-16T23:40:35.233Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.