Digital Asset Management
Approved changes feed: RSS · Atom
cpe:2.3:a:openasset:digital_asset_management:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Openasset (516deeaa-20e8-599b-9e02-d0e9c31b2108) |
|---|---|
| Product | Digital Asset Management (2fda7163-fa94-5207-ab54-5fbe89007028) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-28861 |
vulnerable | 2026-06-08 05:23:56.511268 |
Details available
OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated attackers to gain access to potentially sensitive project information stored by the application.
Published: 2020-12-14T19:37:02.000Z
Updated: 2026-07-09T00:11:58.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28860 |
vulnerable | 2026-06-08 05:23:56.510930 |
Details available
OpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input, incorporating it into its SQL queries, allowing for authenticated blind SQL injection.
Published: 2020-12-14T19:33:22.000Z
Updated: 2026-07-09T00:11:57.431Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28859 |
vulnerable | 2026-06-08 05:23:56.510593 |
Details available
OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for reflected cross-site scripting attacks.
Published: 2020-12-14T19:01:59.000Z
Updated: 2026-07-09T00:11:56.204Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28858 |
vulnerable | 2026-06-08 05:23:56.510149 |
Details available
OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user, allowing for cross-site request forgery attacks on all user functions.
Published: 2020-12-14T18:58:03.000Z
Updated: 2026-07-09T00:11:54.946Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28857 |
vulnerable | 2026-06-08 05:23:56.509676 |
Details available
OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks.
Published: 2020-12-14T18:53:18.000Z
Updated: 2026-07-09T00:11:53.722Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28856 |
vulnerable | 2026-06-08 05:23:56.509232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.