Approved changes feed: RSS · Atom

cpe:2.3:a:openconext:openconext_engineblock:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenconext (f0b81211-2a82-59e8-bf6c-30ea117143d9)
ProductOpenconext Engineblock (51239937-5aec-5a22-bc55-358485d3877f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/openconext/openconext-engineblock purl2cpe 2026-06-01 10:12:51.639647

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1000611 vulnerable 2026-06-08 05:10:25.812626 Details available
SURFnet OpenConext EngineBlock version 5.7.0 to 5.7.3 contains a Cross Site Scripting (XSS) vulnerability that can result in Allows an attacker to inject arbitrary web scripts or HTML into help and login pages. This attack appear to be exploitable via the victim opening a specially crafted URL.
Published: 2018-07-09T20:00:00.000Z
Updated: 2024-09-16T19:25:02.029Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.