Approved changes feed: RSS · Atom
cpe:2.3:a:basware:banking:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Basware (f8011436-d36a-598f-b50f-61909b6ca491) |
|---|---|
| Product | Banking (ceddce83-d9ac-5327-82da-d59b2b61f4ae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-6747 |
vulnerable | 2026-06-08 05:06:53.016817 |
Details available
Basware Banking (Maksuliikenne) 8.90.07.X does not properly prevent access to private keys, which allows remote attackers to spoof communications with banks via unspecified vectors. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 due to different vulnerability types. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-6746.
Published: 2015-08-31T14:08:00.000Z
Updated: 2024-08-06T07:29:24.812Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6746 |
vulnerable | 2026-06-08 05:06:53.016548 |
Details available
Basware Banking (Maksuliikenne) before 8.90.07.X stores private keys in plaintext in the SQL database, which allows remote attackers to spoof communications with banks via unspecified vectors. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 due to different vulnerability types.
Published: 2015-08-31T14:08:00.000Z
Updated: 2024-08-06T07:29:24.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6745 |
vulnerable | 2026-06-08 05:06:53.016290 |
Details available
Basware Banking (Maksuliikenne) 8.90.07.X relies on the client to enforce account locking, which allows local users to bypass that security mechanism by deleting the entry from the locking table. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 and ADT3 due to different vulnerability type and different affected versions. NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-6744.
Published: 2015-08-31T14:08:00.000Z
Updated: 2024-08-06T07:29:24.469Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6744 |
vulnerable | 2026-06-08 05:06:53.016025 |
Details available
Basware Banking (Maksuliikenne) before 8.90.07.X relies on the client to enforce (1) login verification, (2) audit trail creation, and (3) account locking, which allows remote attackers to "disrupt security-critical functions" by "dropping network traffic." NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 and ADT3 due to different vulnerability type and different affected versions.
Published: 2015-08-31T14:08:00.000Z
Updated: 2024-08-06T07:29:24.519Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6743 |
vulnerable | 2026-06-08 05:06:53.015735 |
Details available
Basware Banking (Maksuliikenne) 8.90.07.X uses a hardcoded password for an unspecified account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 and ADT3 due to different vulnerability types and different affected versions.
Published: 2015-08-31T14:08:00.000Z
Updated: 2024-08-06T07:29:24.495Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6742 |
vulnerable | 2026-06-08 05:06:53.015371 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0943 |
vulnerable | 2026-06-08 05:06:24.387883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.