Approved changes feed: RSS · Atom

cpe:2.3:o:redhat:enterprise_mrg:2.5:*:*:*:*:*:*:*

part: o version: 2.5 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductEnterprise Mrg (c90e73bf-4ab6-532f-9e37-f2aedb2ce4bf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2922 vulnerable 2026-06-08 05:06:36.194164 Details available
The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.
Published: 2015-05-27T10:00:00.000Z
Updated: 2024-08-06T05:32:20.794Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0174 vulnerable 2026-06-08 05:05:12.035582 Details available
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Published: 2014-07-11T14:00:00.000Z
Updated: 2024-08-06T09:05:39.195Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6445 vulnerable 2026-06-08 05:04:56.858675 Details available
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack.
Published: 2014-04-30T14:00:00.000Z
Updated: 2024-08-06T17:39:01.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2682 vulnerable 2026-06-08 05:02:05.436485 Details available
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a denial of service (inaccessible page) via a non-ASCII character in the name of a link.
Published: 2014-07-19T19:00:00.000Z
Updated: 2024-08-06T19:42:31.640Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.