GCVE - cpe:2.3:a:globalradar:bsa_radar:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:globalradar:bsa_radar:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Globalradar (`ac134cd5-0568-58fd-9ba2-184abc3bc84e`)
Product	Bsa Radar (`e95e6120-3fa9-5745-8e4e-34a13eb6a39b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-14946`	vulnerable	2026-06-08 05:19:25.021278	Details available downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download transaction files. When downloading the files, a user is able to view local files on the web server by manipulating the FileName and FilePath parameters in the URL, or while using a proxy. This vulnerability could be used to view local sensitive files or configuration files. Published: 2020-06-22T21:43:00.000Z Updated: 2024-08-04T13:00:52.074Z Open on db.gcve.eu Reference links https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities/blob/master/CVE-2020-14946%20-%20Local%20File%20Inclusion.md http://packetstormsecurity.com/files/158420/BSA-Radar-1.6.7234.24750-Local-File-Inclusion.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14945`	vulnerable	2026-06-08 05:19:25.020941	Details available A privilege escalation vulnerability exists within Global RADAR BSA Radar 1.6.7234.24750 and earlier that allows an authenticated, low-privileged user to escalate their privileges to administrator rights (i.e., the BankAdmin role) via modified SaveUser data. Published: 2020-06-22T21:45:24.000Z Updated: 2024-08-04T13:00:52.058Z Open on db.gcve.eu Reference links https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities/blob/master/CVE-2020-14945%20-%20Privilege%20Escalation.md https://www.exploit-db.com/exploits/48649	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14944`	vulnerable	2026-06-08 05:19:25.020490	Details available Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. The following vulnerable functions are exposed: ChangePassword, SaveUserProfile, and GetUser. Published: 2020-06-22T21:48:58.000Z Updated: 2024-08-04T13:00:52.014Z Open on db.gcve.eu Reference links https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities/blob/master/CVE-2020-14944%20-%20Access%20Control%20Vulnerabilities.md http://packetstormsecurity.com/files/158372/BSA-Radar-1.6.7234.24750-Cross-Site-Request-Forgery.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14943`	vulnerable	2026-06-08 05:19:25.020040	Details available The Firstname and Lastname parameters in Global RADAR BSA Radar 1.6.7234.24750 and earlier are vulnerable to stored cross-site scripting (XSS) via Update User Profile. Published: 2020-06-22T21:50:09.000Z Updated: 2024-08-04T13:00:52.078Z Open on db.gcve.eu Reference links https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities https://github.com/wsummerhill/BSA-Radar_CVE-Vulnerabilities/blob/master/CVE-2020-14943%20-%20Stored%20XSS.md http://packetstormsecurity.com/files/158217/BSA-Radar-1.6.7234.24750-Cross-Site-Scripting.html https://www.exploit-db.com/exploits/48619	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Bsa Radar

Notes

PURL mappings

Vulnerability references

Contribute