Approved changes feed: RSS · Atom

cpe:2.3:a:iportalis:iportalis_control_portal:7.1.13.0:*:*:*:*:*:*:*

part: a version: 7.1.13.0 update: *

VendorIportalis (3fe59eb7-ddf4-5a66-b727-12b31b491003)
ProductIportalis Control Portal (d020565b-892a-5744-bbfc-6613d62bd245)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9002 vulnerable 2026-06-08 05:27:20.224483 Details available
CRITICAL (9.6)
An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANY_ADMIN to UserRoleKey=DOMAIN_ADMIN (to achieve Domain Administrator access).
Published: 2021-09-01T10:45:57.000Z
Updated: 2024-08-04T10:19:19.778Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9000 vulnerable 2026-06-08 05:27:20.223686 Details available
An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server until memory is exhausted, therefore consuming the maximum amount of resources (triggering a denial of service condition).
Published: 2021-09-01T10:45:48.000Z
Updated: 2024-08-04T10:19:19.787Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.