Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:cx-one_(cx-programmer_and_cx-server):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductCx One (Cx Programmer And Cx Server) (affa0793-4fcc-5630-8e32-80d8c8c624c2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-18993 vulnerable 2026-06-08 05:11:15.064756 Details available
Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior). When processing project files, the application allows input data to exceed the buffer. An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the application.
Published: 2018-12-04T22:00:00.000Z
Updated: 2024-08-05T11:23:08.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18989 vulnerable 2026-06-08 05:11:15.058716 Details available
In CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior), when processing project files, the application fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
Published: 2018-12-04T22:00:00.000Z
Updated: 2024-08-05T11:23:08.511Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.