Oneshield Policy

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:oneshield:oneshield_policy:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOneshield (b717a28f-ae9a-5239-a7ec-5255afdb8806)
ProductOneshield Policy (b91d49ee-c3f7-5a69-822a-70d3c8892e81)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11643 vulnerable 2026-06-08 05:12:37.782398 Details available
Persistent XSS has been found in the OneShield Policy (Dragon Core) framework before 5.1.10. Remote adversaries can inject malicious JavaScript into textboxes decorated with type string, which is subsequently stored to the applicable data store. This can be exploited remotely by both authenticated and unauthenticated users.
Published: 2019-05-08T15:26:13.000Z
Updated: 2024-08-04T23:03:31.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11642 vulnerable 2026-06-08 05:12:37.781863 Details available
A log poisoning vulnerability has been discovered in the OneShield Policy (Dragon Core) framework before 5.1.10. Authenticated remote adversaries can poison log files by entering malicious payloads in either headers or form elements. These payloads are then executed via a client side debugging console. This is predicated on the debugging console and Java Bean being made available to the deployed application.
Published: 2019-05-08T15:31:05.000Z
Updated: 2024-08-04T23:03:31.509Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.