Approved changes feed: RSS · Atom

cpe:2.3:a:anviz:crosschex_standard:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorAnviz (b6cad703-cbb1-5fd5-9c9d-8ffc4d1d6388)
ProductCrosschex Standard (85e07979-197e-5114-9ba5-d5614d3c6562)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40434 vulnerable 2026-06-03 15:23:34.748423 Anviz CrossChex Standard Improper Verification of Source of a Communication Channel
HIGH (8.1)
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic.
Published: 2026-04-17T19:49:28.099Z
Updated: 2026-04-17T20:28:02.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32650 vulnerable 2026-06-03 15:20:43.418781 Anviz CrossChex Standard Algorithm Downgrade
HIGH (7.5)
Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials to be sent in plaintext and enabling unauthorized database access.
Published: 2026-04-17T19:52:45.308Z
Updated: 2026-04-17T20:26:17.922Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.