Star Practice Management
Approved changes feed: RSS · Atom
cpe:2.3:a:iris:star_practice_management:2019.2.0.6:*:*:*:*:*:*:*
part: a version: 2019.2.0.6 update: *
| Vendor | Iris (d7e99708-8ff1-537f-aa6f-cd21b2b695d0) |
|---|---|
| Product | Star Practice Management (4fb1c8fb-d8c7-5597-87fe-2725ac9a8e77) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-28406 |
vulnerable | 2026-06-08 05:23:54.731380 |
Details available
MEDIUM (6.5)
An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access details about jobs he should not have access to via the Audit Trail Feature.
Published: 2021-01-29T06:11:11.000Z
Updated: 2025-05-30T16:01:33.482Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28405 |
vulnerable | 2026-06-08 05:23:54.731020 |
Details available
HIGH (8.8)
An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to change the privileges of any user of the application. This can be used to grant himself the administrative role or remove all administrative accounts of the application.
Published: 2021-01-29T06:10:27.000Z
Updated: 2025-05-30T16:01:29.330Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28404 |
vulnerable | 2026-06-08 05:23:54.730437 |
Details available
MEDIUM (6.5)
An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access the Billing page without the appropriate privileges.
Published: 2021-01-29T06:09:38.000Z
Updated: 2025-05-30T16:01:36.521Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28402 |
vulnerable | 2026-06-08 05:23:54.728090 |
Details available
MEDIUM (5.4)
An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher Configuration Panel.
Published: 2021-01-29T06:07:40.000Z
Updated: 2025-05-30T16:01:32.921Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28401 |
vulnerable | 2026-06-08 05:23:54.727618 |
Details available
MEDIUM (6.5)
An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to.
Published: 2021-01-29T06:07:04.000Z
Updated: 2025-05-30T16:01:24.859Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.