Camstar Enterprise Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:camstar_enterprise_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Camstar Enterprise Platform (35976a6c-0469-515f-b1a9-159363b9693d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-7578 |
vulnerable | 2026-06-08 05:27:13.610090 |
Details available
A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2). Authenticated users could have access to resources they normally would not have. This vulnerability could allow an attacker to view internal information and perform unauthorized changes.
Published: 2020-07-14T13:18:05.000Z
Updated: 2024-08-04T09:33:19.916Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7577 |
vulnerable | 2026-06-08 05:27:13.609546 |
Details available
A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2). Through the use of several vulnerable fields of the application, an authenticated user could perform an SQL Injection attack by passing a modified SQL query downstream to the back-end server. The exploit of this vulnerability could be used to read, and potentially modify application data to which the user has access to.
Published: 2020-07-14T13:18:05.000Z
Updated: 2024-08-04T09:33:19.769Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7576 |
vulnerable | 2026-06-08 05:27:13.608255 |
Details available
A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2), Opcenter Execution Core (V8.2). An authenticated user with the ability to create containers, packages or register defects could perform stored Cross-Site Scripting (XSS) attacks within the vulnerable software. The impact of this attack could result in the session cookies of legitimate users being stolen. Should the attacker gain access to these cookies, they could then hijack the session and perform arbitrary actions in the name of the victim.
Published: 2020-07-14T13:18:05.000Z
Updated: 2024-08-04T09:33:19.929Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.