Approved changes feed: RSS · Atom

cpe:2.3:a:dialogic:powermedia_xms:3.5:su1:*:*:*:*:*:*

part: a version: 3.5 update: su1

VendorDialogic (2d8d5761-0bba-5634-b172-d6f5792860ce)
ProductPowermedia Xms (c8b2b450-5b9a-5c24-acb4-e2113151d3c5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/dialogic/dialogic-xmsclientlibrary purl2cpe 2026-06-01 10:12:16.850175

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-11639 vulnerable 2026-06-08 05:10:38.752834 Details available
Plaintext Storage of Passwords within Cookies in /var/www/xms/application/controllers/verifyLogin.php in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to access a user's password in cleartext.
Published: 2018-07-03T17:00:00.000Z
Updated: 2024-08-05T08:17:08.437Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11634 vulnerable 2026-06-08 05:10:38.750826 Details available
Plaintext Storage of Passwords in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows local users to access the web application's user passwords in cleartext by reading /var/www/xms/xmsdb/default.db.
Published: 2018-07-03T17:00:00.000Z
Updated: 2024-08-05T08:17:08.092Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.