Approved changes feed: RSS · Atom

cpe:2.3:a:whitebearsolutions:wbsairback:21.02.04:*:*:*:*:*:*:*

part: a version: 21.02.04 update: *

VendorWhitebearsolutions (fc27a7ae-0a14-55d7-845e-60d014629d54)
ProductWbsairback (a2f99e8c-ced3-51f8-b16d-680619ce027f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/whitebearsolutions/wbsairback purl2cpe 2026-06-01 10:17:42.135386

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3796 vulnerable 2026-06-08 06:43:51.550757 Cross-site Scripting vulnerability in WBSAirback
MEDIUM (4.8)
Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/BackupSchedule, description field. Exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data.
Published: 2024-04-15T14:15:20.141Z
Updated: 2024-08-01T20:20:02.125Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3795 vulnerable 2026-06-08 06:43:51.550322 Cross-site Scripting vulnerability in WBSAirback
MEDIUM (4.8)
Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/BackupTemplate, name / description fields. Exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data.
Published: 2024-04-15T14:14:52.819Z
Updated: 2024-08-08T18:46:22.149Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3794 vulnerable 2026-06-08 06:43:51.549873 Cross-site Scripting vulnerability in WBSAirback
MEDIUM (4.8)
Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/AdvancedSystem, description field, all parameters. Exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data.
Published: 2024-04-15T14:13:58.096Z
Updated: 2024-08-01T20:20:01.788Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3793 vulnerable 2026-06-08 06:43:51.549387 Cross-site Scripting vulnerability in WBSAirback
MEDIUM (4.8)
Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/CloudAccounts, account name / user password / server fields, all parameters. Exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data.
Published: 2024-04-15T14:13:45.373Z
Updated: 2024-08-01T20:20:02.154Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3792 vulnerable 2026-06-08 06:43:51.549038 Cross-site Scripting vulnerability in WBSAirback
MEDIUM (4.8)
Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/DeviceReplication, execution range field, all parameters. Exploitation of this vulnerability could allow a remote user to send a specially crafted URL to the victim and steal their session data.
Published: 2024-04-15T14:13:31.770Z
Updated: 2024-08-01T20:20:01.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3791 vulnerable 2026-06-08 06:43:51.548588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3790 vulnerable 2026-06-08 06:43:51.547979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3789 vulnerable 2026-06-08 06:43:51.547487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3788 vulnerable 2026-06-08 06:43:51.547006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3787 vulnerable 2026-06-08 06:43:51.546652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3786 vulnerable 2026-06-08 06:43:51.546289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3785 vulnerable 2026-06-08 06:43:51.545914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3784 vulnerable 2026-06-08 06:43:51.545543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3783 vulnerable 2026-06-08 06:43:51.545052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3782 vulnerable 2026-06-08 06:43:51.544466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3781 vulnerable 2026-06-08 06:43:51.542987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.