Dimensions Cm
Approved changes feed: RSS · Atom
cpe:2.3:a:serena:dimensions_cm:12.2:build7.199.0:*:*:*:*:*:*
part: a version: 12.2 update: build7.199.0
| Vendor | Serena (0b21e6e9-c8c8-5634-8144-1ad8115c5a6c) |
|---|---|
| Product | Dimensions Cm (04b1985c-9795-5ba1-8886-1afd3ba72a71) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-0336 |
vulnerable | 2026-06-08 05:05:12.606162 |
Details available
Cross-site request forgery (CSRF) vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that use the user_new_master parameter to the adminconsole/ URI.
Published: 2014-03-06T11:00:00.000Z
Updated: 2024-08-06T09:13:09.892Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0335 |
vulnerable | 2026-06-08 05:05:12.605829 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the web client in Serena Dimensions CM 12.2 build 7.199.0 allow remote attackers to inject arbitrary web script or HTML via the (1) DB_CONN, (2) DB_NAME, (3) DM_HOST, (4) MAN_DB_NAME, (5) framecmd, (6) identifier, (7) merant.adm.adapters.AdmDialogPropertyMgr, (8) nav_frame, (9) nav_jsp, (10) target_frame, (11) id, or (12) type parameter to the dimensions/ URI.
Published: 2014-03-06T11:00:00.000Z
Updated: 2024-08-06T09:13:09.769Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.