Platform Server
Approved changes feed: RSS · Atom
cpe:2.3:a:outsystems:platform_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Outsystems (4bbc9b80-c48b-52c7-b4a9-1c9f3cf1c9d8) |
|---|---|
| Product | Platform Server (41337216-1030-5936-ad50-f2a8576f1bcb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-29357 |
vulnerable | 2026-06-08 05:31:26.125643 |
Details available
The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 (and LifeTime management console before 11.7.0) allows SSRF for arbitrary outbound HTTP requests.
Published: 2021-04-12T18:59:08.000Z
Updated: 2024-08-03T22:02:51.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13639 |
vulnerable | 2026-06-08 05:18:00.943696 |
Details available
A stored XSS vulnerability was discovered in the ECT Provider in OutSystems before 2020-09-04, affecting generated applications. It could allow an unauthenticated remote attacker to craft and store malicious Feedback content into /ECT_Provider/, such that when the content is viewed (it can only be viewed by Administrators), attacker-controlled JavaScript will execute in the security context of an administrator's browser. This is fixed in Outsystems 10.0.1005.2, Outsystems 11.9.0 Platform Server, and Outsystems 11.7.0 LifeTime Management Console.
Published: 2021-08-31T03:56:44.000Z
Updated: 2024-08-04T12:25:16.476Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.