Approved changes feed: RSS · Atom
cpe:2.3:a:hallowelt:bluespice:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hallowelt (e755a26d-a202-5af6-8b8f-f85b5e50f2d8) |
|---|---|
| Product | Bluespice (c2ed4b08-dc19-545d-8c56-e2b5207719c0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/bluespice/bluespice-free |
purl2cpe | 2026-06-01 10:12:26.544568 |
pkg:sourcecode/bluespice |
purl2cpe | 2026-06-01 10:12:26.544569 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-58114 |
vulnerable | 2026-06-08 07:35:17.206542 |
Potential XSS in Extension:CognitiveProcessDesigner
Improper Input Validation vulnerability in Hallo Welt! GmbH BlueSpice (Extension:CognitiveProcessDesigner) allows Cross-Site Scripting (XSS).This issue affects BlueSpice: from 5 through 5.1.1.
Published: 2025-09-19T13:10:38.231Z
Updated: 2025-09-19T13:55:52.996Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57880 |
vulnerable | 2026-06-08 07:33:16.302657 |
Potential XSS in Extension:BlueSpiceWhoIsOnline
Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceWhoIsOnline) allows Cross-Site Scripting (XSS).
This issue affects BlueSpice: from 5 through 5.1.1.
Published: 2025-09-19T13:10:12.916Z
Updated: 2025-09-19T13:56:35.076Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48007 |
vulnerable | 2026-06-08 07:27:15.373485 |
Potential XSS in Extension:BlueSpiceAvatars
Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceAvatars) allows Cross-Site Scripting (XSS).
This issue affects BlueSpice: from 5 through 5.1.1.
Published: 2025-09-19T13:09:47.243Z
Updated: 2025-09-19T14:03:52.710Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46703 |
vulnerable | 2026-06-08 07:27:08.625106 |
Potential XSS in Extension:AtMentions
Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:AtMentions) allows Cross-Site Scripting (XSS).
This issue affects BlueSpice: from 5 through 5.1.1.
Published: 2025-09-19T13:09:20.143Z
Updated: 2025-09-19T14:04:13.791Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42431 |
vulnerable | 2026-06-08 06:11:08.059535 |
Potential XSS on user preferences page
LOW (2.1)
Cross-site Scripting (XSS) vulnerability in BlueSpiceAvatars extension of BlueSpice allows logged in user to inject arbitrary HTML into the profile image dialog on Special:Preferences. This only applies to the genuine user context.
Published: 2023-10-30T10:48:21.487Z
Updated: 2024-09-06T18:06:33.247Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42001 |
vulnerable | 2026-06-08 05:49:29.095055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42000 |
vulnerable | 2026-06-08 05:49:29.094299 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41814 |
vulnerable | 2026-06-08 05:48:31.258023 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41789 |
vulnerable | 2026-06-08 05:48:30.967689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41611 |
vulnerable | 2026-06-08 05:48:30.607985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3958 |
vulnerable | 2026-06-08 05:48:22.700164 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3895 |
vulnerable | 2026-06-08 05:48:22.563135 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3893 |
vulnerable | 2026-06-08 05:48:22.560008 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2511 |
vulnerable | 2026-06-08 05:43:35.705090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2510 |
vulnerable | 2026-06-08 05:43:35.703054 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.