Approved changes feed: RSS · Atom

cpe:2.3:a:psi-probe:psi_probe:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPsi Probe (d8fb51f6-a96a-5f57-9380-a47e15ba4e74)
ProductPsi Probe (2d48b1c2-9cc7-5f66-928f-9e11c4fa9036)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/psi-probe/psi-probe purl2cpe 2026-06-01 10:15:33.661654
pkg:maven/com.github.psi-probe/psi-probe-core purl2cpe 2026-06-01 10:15:33.661656

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3270 vulnerable 2026-06-08 08:01:18.298031 psi-probe PSI Probe Whois Whois.java lookup server-side request forgery
MEDIUM (6.3)
A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the component Whois. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-02-26T23:32:09.687Z
Updated: 2026-02-27T19:55:03.743Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3269 vulnerable 2026-06-08 08:01:18.297541 psi-probe PSI Probe Session ExpireSessionsController.java handleRequestInternal denial of service
MEDIUM (4.3)
A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-02-26T23:32:07.430Z
Updated: 2026-02-27T19:57:57.822Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3268 vulnerable 2026-06-08 08:01:18.297103 psi-probe PSI Probe Session Attribute RemoveSessAttributeController.java access control
MEDIUM (5.4)
A vulnerability was detected in psi-probe PSI Probe up to 5.3.0. The affected element is an unknown function of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/RemoveSessAttributeController.java of the component Session Attribute Handler. Performing a manipulation results in improper access controls. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-02-26T23:02:08.067Z
Updated: 2026-02-27T17:27:38.521Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.