GCVE - cpe:2.3:a:pywbem_project:pywbem:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:pywbem_project:pywbem:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Pywbem Project (`1c589d65-adf9-5c3e-ba7b-8bef2296c882`)
Product	Pywbem (`c4bb9786-3c4c-5e03-82d5-ee63a32f1e18`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:deb/debian/python-pywbem`	purl2cpe	2026-06-01 10:10:56.899933
`pkg:deb/ubuntu/python-pywbem`	purl2cpe	2026-06-01 10:10:56.899934
`pkg:github/pywbem/pywbem`	purl2cpe	2026-06-01 10:10:56.899936
`pkg:pypi/pywbem`	purl2cpe	2026-06-01 10:10:56.899937
`pkg:rpm/fedora/pywbem`	purl2cpe	2026-06-01 10:10:56.899939
`pkg:rpm/opensuse/python-pywbem`	purl2cpe	2026-06-01 10:10:56.899940

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-6444`	vulnerable	2026-06-08 05:04:56.857327	Details available PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Published: 2014-05-05T17:00:00.000Z Updated: 2024-08-06T17:39:01.254Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1044246 http://sourceforge.net/p/pywbem/mailman/message/31757312/ http://seclists.org/oss-sec/2013/q4/524 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html http://www.securityfocus.com/bid/64544	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6418`	vulnerable	2026-06-08 05:04:56.634453	Details available PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an arbitrary certificate. Published: 2014-05-05T17:00:00.000Z Updated: 2024-08-06T17:39:01.351Z Open on db.gcve.eu Reference links http://seclists.org/oss-sec/2013/q4/531 http://sourceforge.net/p/pywbem/mailman/message/31757312/ http://secunia.com/advisories/58327 http://www.securityfocus.com/bid/64544 http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.