Approved changes feed: RSS · Atom

cpe:2.3:o:checkpoint:gaia_os:r81.10:*:*:*:*:*:*:*

part: o version: r81.10 update: *

VendorCheckpoint (963cc759-0773-5380-992a-923d56af82ce)
ProductGaia Os (7085f1ea-8874-5c7b-b4ed-887f00daffe1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52888 not_vulnerable 2026-06-08 06:52:16.341335 Stored-XSS
MEDIUM (5.4)
For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties.
Published: 2025-04-27T07:46:53.542Z
Updated: 2025-04-28T16:31:15.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52887 not_vulnerable 2026-06-08 06:52:16.340705 Self-XSS
LOW (3.5)
Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list.
Published: 2025-04-27T07:46:23.027Z
Updated: 2025-04-28T16:31:21.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52885 not_vulnerable 2026-06-08 06:52:16.331852 Path Traversal
MEDIUM (5)
The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directories on the Mobile Access gateway.
Published: 2025-08-06T14:45:43.182Z
Updated: 2025-08-06T15:03:53.437Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24914 vulnerable 2026-06-08 06:29:42.015719 Details available
HIGH (8)
Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.
Published: 2024-11-07T11:25:53.238Z
Updated: 2024-11-07T17:33:31.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24911 vulnerable 2026-06-08 06:29:42.004160 Out of Bounds read in the CPCA process on Check Point Management Server
MEDIUM (5.3)
In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache.
Published: 2025-02-06T13:46:11.824Z
Updated: 2025-02-06T14:11:48.901Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.