GCVE - cpe:2.3:a:opswat:metadefender:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:opswat:metadefender:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Opswat (`14b1e6fa-4a28-5900-ac27-86d6e1dab9a6`)
Product	Metadefender (`fecdd6e4-bbd5-57f5-b238-ba60fff671b0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:docker/opswat/metadefendercore-centos`	purl2cpe	2026-06-01 10:12:59.881851
`pkg:docker/opswat/metadefendercore-debian`	purl2cpe	2026-06-01 10:12:59.881854
`pkg:npm/metadefender`	purl2cpe	2026-06-01 10:12:59.881855

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-40778`	vulnerable	2026-06-08 05:48:28.187179	Details available A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML because of the blocked page response. Published: 2022-09-19T06:08:32.000Z Updated: 2024-08-03T12:28:42.599Z Open on db.gcve.eu Reference links https://www.opswat.com/products/metadefender/icap https://docs.opswat.com/mdicap/release-notes	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-32273`	vulnerable	2026-06-08 05:44:43.120326	Details available As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2 could allow an authenticated user to enumerate filenames on the server. Published: 2022-06-08T15:23:22.000Z Updated: 2024-08-03T07:39:50.835Z Open on db.gcve.eu Reference links https://opswat.com https://docs.opswat.com/mdcore/release-notes	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-32272`	vulnerable	2026-06-08 05:44:43.119911	Details available OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation. Published: 2022-06-09T00:00:00.000Z Updated: 2024-08-03T07:39:50.934Z Open on db.gcve.eu Reference links https://opswat.com https://docs.opswat.com/mdcore/release-notes https://docs.opswat.com/mdemail/release-notes https://docs.opswat.com/mdicap/release-notes https://docs.opswat.com/mdicap/release-notes/version-4-12-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16275`	vulnerable	2026-06-08 05:11:04.650446	Details available OPSWAT MetaDefender before v4.11.2 allows CSV injection. Published: 2018-08-31T13:00:00.000Z Updated: 2024-09-16T16:13:35.189Z Open on db.gcve.eu Reference links https://onlinehelp.opswat.com/corev4/10._Release_notes.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.