Approved changes feed: RSS · Atom

cpe:2.3:a:carestream:vue_ris:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCarestream (6ca54775-5fbc-5b9a-bb77-c95a74a07b66)
ProductVue Ris (7cde1037-ce2a-53fa-975e-0de99245a1bf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17891 vulnerable 2026-06-08 05:11:06.849631 Details available
Carestream Vue RIS, RIS Client Builds: Version 11.2 and prior running on a Windows 8.1 machine with IIS/7.5. When contacting a Carestream server where there is no Oracle TNS listener available, users will trigger an HTTP 500 error, leaking technical information an attacker could use to initiate a more elaborate attack.
Published: 2018-10-04T21:00:00.000Z
Updated: 2024-09-17T02:32:31.321Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.