GCVE - cpe:2.3:a:visam:vbase_editor:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:visam:vbase_editor:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Visam (`b81bf73d-0d07-526c-a087-936f3ea763b3`)
Product	Vbase Editor (`8351dd12-1630-5ff5-9149-eaf841d78f21`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-7008`	vulnerable	2026-06-08 05:27:11.723714	Details available VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an attacker to read arbitrary files from local resources. Published: 2020-04-03T17:44:19.000Z Updated: 2024-08-04T09:18:03.036Z Open on db.gcve.eu Reference links https://www.us-cert.gov/ics/advisories/icsa-20-084-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-7004`	vulnerable	2026-06-08 05:27:11.716770	Details available VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effects on the system the next time a privileged user runs the application. Published: 2020-04-03T17:44:24.000Z Updated: 2024-08-04T09:18:02.819Z Open on db.gcve.eu Reference links https://www.us-cert.gov/ics/advisories/icsa-20-084-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-7000`	vulnerable	2026-06-08 05:27:11.677040	Details available VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information about the login and the encryption/decryption mechanism, which may be exploited to bypass authentication of the HTML5 HMI web interface. Published: 2020-04-03T17:50:58.000Z Updated: 2024-08-04T09:18:03.107Z Open on db.gcve.eu Reference links https://www.us-cert.gov/ics/advisories/icsa-20-084-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-10601`	vulnerable	2026-06-08 05:16:35.350278	Details available VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protected mechanism through brute-force attacks, cracking techniques, or overwriting the password hash. Published: 2020-04-03T17:44:30.000Z Updated: 2024-08-04T11:06:09.972Z Open on db.gcve.eu Reference links https://www.us-cert.gov/ics/advisories/icsa-20-084-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-10599`	vulnerable	2026-06-08 05:16:35.346338	Details available VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffer overflow, which may lead to a denial-of-service condition and execution of arbitrary code. Published: 2020-04-03T17:51:39.000Z Updated: 2024-08-04T11:06:10.208Z Open on db.gcve.eu Reference links https://www.us-cert.gov/ics/advisories/icsa-20-084-01	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.