GCVE - cpe:2.3:a:northern.tech:cfengine:*:*:*:*:enterprise:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:northern.tech:cfengine:*:*:*:*:enterprise:*:*:*

part: a version: * update: *

Vendor	Northern.Tech (`0f007064-8d3c-553e-8c6a-34471f428a50`)
Product	Cfengine (`af52239b-896a-5d9c-84e6-cc4b3e4a24b5`)
Edition	*
Language	*
Software edition	enterprise
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-24712`	vulnerable	2026-06-08 07:51:17.997990	Details available Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection. Published: 2026-05-14T00:00:00.000Z Updated: 2026-05-15T13:30:12.523Z Open on db.gcve.eu Reference links https://northern.tech https://cfengine.com/blog/2026/cve-2026-24710-and-cve-2026-24711-and-cve-2026-24712/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-24711`	vulnerable	2026-06-08 07:51:17.997682	Details available Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 has Incorrect Access Control. Published: 2026-05-14T00:00:00.000Z Updated: 2026-05-15T13:28:04.661Z Open on db.gcve.eu Reference links https://northern.tech https://cfengine.com/blog/2026/cve-2026-24710-and-cve-2026-24711-and-cve-2026-24712/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-24710`	vulnerable	2026-06-08 07:51:17.996206	Details available Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS. Published: 2026-05-14T00:00:00.000Z Updated: 2026-05-14T15:25:41.560Z Open on db.gcve.eu Reference links https://northern.tech https://cfengine.com/blog/2026/cve-2026-24710-and-cve-2026-24711-and-cve-2026-24712/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-45684`	vulnerable	2026-06-08 06:12:43.111461	Details available Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18.6 and 3.21.3. The earliest affected version is 3.6.0. The issue is in the Mission Portal login page in the CFEngine hub. Published: 2023-11-14T00:00:00.000Z Updated: 2024-09-03T15:13:52.177Z Open on db.gcve.eu Reference links https://cfengine.com/blog/2023/cve-2023-45684/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-26560`	vulnerable	2026-06-08 05:57:39.976919	Details available Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to leverage the Scheduled Reports feature to read arbitrary files and potentially discover credentials. Published: 2023-04-25T00:00:00.000Z Updated: 2025-02-04T15:15:50.284Z Open on db.gcve.eu Reference links https://northern.tech https://cfengine.com/blog/2023/cve-2023-26560/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44216`	vulnerable	2026-06-08 05:36:45.148369	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44215`	vulnerable	2026-06-08 05:36:45.147794	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38379`	vulnerable	2026-06-08 05:32:55.987313	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19394`	vulnerable	2026-06-08 05:13:22.247936	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.