Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:dashbuilder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductDashbuilder (bf0bfa97-dec9-5e66-8271-83fb87f1db54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/dashbuilder/dashbuilder purl2cpe 2026-06-01 10:12:53.029747
pkg:github/dashbuilder/dashbuilder-website purl2cpe 2026-06-01 10:12:53.029749

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4999 vulnerable 2026-06-08 05:07:55.903132 Details available
SQL injection vulnerability in the getStringParameterSQL method in main/java/org/dashbuilder/dataprovider/sql/dialect/DefaultDialect.java in Dashbuilder before 0.6.0.Beta1 allows remote attackers to execute arbitrary SQL commands via a data set lookup filter in the (1) Data Set Authoring or (2) Displayer editor UI.
Published: 2016-08-05T15:00:00.000Z
Updated: 2024-08-06T00:46:40.208Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.