GCVE - cpe:2.3:a:skyboxsecurity:skybox_platform:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:skyboxsecurity:skybox_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Skyboxsecurity (`3bf59d6e-8300-5bd6-87af-2bd6dcaeeb4b`)
Product	Skybox Platform (`e118272f-66b7-5a46-bcfa-7bb92c2d840a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-9250`	vulnerable	2026-06-08 05:07:13.379465	Details available An issue was discovered in Skybox Platform before 7.5.201. Directory Traversal exists in /skyboxview/webskybox/attachmentdownload and /skyboxview/webskybox/filedownload via the tempFileName parameter. Published: 2018-01-12T22:00:00.000Z Updated: 2024-08-06T08:43:42.395Z Open on db.gcve.eu Reference links https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilities_v10.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-9249`	vulnerable	2026-06-08 05:07:13.379180	Details available An issue was discovered in Skybox Platform before 7.5.201. SQL Injection exists in /skyboxview/webservice/services/VersionWebService via a soapenv:Body element. Published: 2018-01-12T22:00:00.000Z Updated: 2024-08-06T08:43:42.581Z Open on db.gcve.eu Reference links https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilities_v10.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-9248`	vulnerable	2026-06-08 05:07:13.378872	Details available An issue was discovered in Skybox Platform before 7.5.201. Stored cross-site scripting vulnerabilities exist in the title, Comments, or Description field to /skyboxview/webskybox/tickets in Change Manager. Published: 2018-01-12T22:00:00.000Z Updated: 2024-08-06T08:43:42.328Z Open on db.gcve.eu Reference links https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilities_v10.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-9247`	vulnerable	2026-06-08 05:07:13.378588	Details available An issue was discovered in Skybox Platform before 7.5.401. Reflected cross-site scripting vulnerabilities exist in /skyboxview/webservice/services/VersionRepositoryWebService via a soapenv:Body element, or in the status parameter to login.html. Published: 2018-01-12T22:00:00.000Z Updated: 2024-08-06T08:43:42.254Z Open on db.gcve.eu Reference links https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilities_v10.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-9246`	vulnerable	2026-06-08 05:07:13.378192	Details available An issue was discovered in Skybox Platform before 7.5.201. Remote Unauthenticated Code Execution exists via a WAR archive containing a JSP file. The WAR file is sent to /skyboxview-softwareupdate/services/CollectorSoftwareUpdate and the JSP file is reached at /opt/skyboxview/thirdparty/jboss/server/web/work/jboss.web/localhost. Published: 2018-01-12T22:00:00.000Z Updated: 2024-08-06T08:43:42.265Z Open on db.gcve.eu Reference links https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20151210-0_Skybox_Platform_Multiple_Vulnerabilities_v10.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.