Approved changes feed: RSS · Atom

cpe:2.3:a:leica_geosystems_ag:gr10/gr25/gr30/gr50_gnss:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLeica Geosystems Ag (ed5e58a7-35a1-51c2-a8b4-f055db638d06)
ProductGr10/Gr25/Gr30/Gr50 Gnss (5ba32e12-f347-554a-858d-76c1923624db)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25131 vulnerable 2026-06-08 05:11:29.435548 Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Stored XSS via Config Upload
HIGH (7.2)
Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a stored cross-site scripting vulnerability in the configuration file upload functionality. Attackers can upload a malicious HTML file to that executes arbitrary JavaScript in a user's browser session when viewed.
Published: 2025-12-24T19:27:44.162Z
Updated: 2025-12-24T20:27:01.726Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.