GleamTech FileVista 9.2.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gleamtech:filevista:9.2.0:*:*:*:*:*:*:*

part: a version: 9.2.0 update: *

VendorGleamtech (34e585c1-e5b5-50b9-a53c-a408e9870ff0)
ProductFilevista (c6129ca5-3926-528d-85c3-0f4c105ee26c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/gleamtech/filevista purl2cpe 2026-09-15 20:24:54.619734

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-57249 vulnerable 2026-06-08 06:56:13.451971 Details available
Incorrect Access Control in the Preview Function of Gleamtech FileVista 9.2.0.0 allows remote attackers to gain unauthorized access via exploiting a vulnerability in access control mechanisms by removing authentication-related HTTP headers, such as the Cookie header, in the request. This bypasses the authentication process and grants attackers access to sensitive image files without proper login credentials.
Published: 2025-02-07T00:00:00.000Z
Updated: 2025-02-11T15:21:05.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-57248 vulnerable 2026-06-08 06:56:13.451378 Details available
Directory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Information Disclosure, and Escalation of Privileges via injecting malicious payloads in HTTP requests to manipulate file paths, bypass access controls, and upload malicious files.
Published: 2025-02-07T00:00:00.000Z
Updated: 2025-02-11T15:22:10.534Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.