Approved changes feed: RSS · Atom

cpe:2.3:a:cubecoders:amp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCubecoders (cceaaf23-366b-5e3a-abf6-7646364e81f4)
ProductAmp (d85ea9d7-343a-5d5a-b9fd-c957ca1b59e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/cubecoders/amp purl2cpe 2026-06-01 10:16:21.890599

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34539 vulnerable 2026-06-08 05:32:13.756293 Details available
An issue was discovered in CubeCoders AMP before 2.1.1.8. A lack of validation of the Java Version setting means that an unintended executable path can be set. The result is that high-privileged users can trigger code execution.
Published: 2021-06-10T10:59:29.000Z
Updated: 2024-08-04T00:12:50.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31926 vulnerable 2026-06-08 05:31:54.374192 Details available
AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration).
Published: 2021-04-30T19:56:57.000Z
Updated: 2024-08-03T23:10:31.372Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.