GCVE - cpe:2.3:a:squaredup:squaredup:*:*:*:*:azure:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:squaredup:squaredup:*:*:*:*:azure:*:*:*

part: a version: * update: *

Vendor	Squaredup (`41c6e440-6698-563f-aa55-e564836b6c2e`)
Product	Squaredup (`63f03e14-2af4-5c89-8f86-2ec642461886`)
Edition	*
Language	*
Software edition	azure
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-40096`	vulnerable	2026-06-08 05:35:16.794629	Details available A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via modification of the authorisationUrl in some integration configurations. Published: 2021-12-07T12:58:33.000Z Updated: 2024-08-04T02:27:31.488Z Open on db.gcve.eu Reference links https://support.squaredup.com https://support.squaredup.com/hc/en-us/articles/4410656396817-CVE-2021-40096-Stored-cross-site-scripting-provider-configuration-	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-40095`	vulnerable	2026-06-08 05:35:16.794103	Details available An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptible to a local file inclusion vulnerability (when processing remote input in the log files downloaded by an authenticated administrator user), leading to the ability to read arbitrary files on the server filesystems. Published: 2021-12-07T12:54:16.000Z Updated: 2024-08-04T02:27:31.492Z Open on db.gcve.eu Reference links https://support.squaredup.com https://support.squaredup.com/hc/en-us/articles/4410635419153-CVE-2021-40095-Reading-arbitrary-files	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-40094`	vulnerable	2026-06-08 05:35:16.793466	Details available A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device. Published: 2021-12-07T12:51:54.000Z Updated: 2024-08-04T02:27:31.428Z Open on db.gcve.eu Reference links https://support.squaredup.com https://support.squaredup.com/hc/en-us/articles/4410656395537-CVE-2021-40094-DOM-based-stored-cross-site-scripting	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-40093`	vulnerable	2026-06-08 05:35:16.793006	Details available A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via dashboard actions. Published: 2021-12-07T12:48:40.000Z Updated: 2024-08-04T02:27:31.482Z Open on db.gcve.eu Reference links https://support.squaredup.com https://support.squaredup.com/hc/en-us/articles/4410635418257-CVE-2021-40093-Stored-cross-site-scripting-Action-Buttons-	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-40092`	vulnerable	2026-06-08 05:35:16.792529	Details available A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file. Published: 2021-12-07T12:42:44.000Z Updated: 2024-08-04T02:27:31.835Z Open on db.gcve.eu Reference links https://support.squaredup.com https://support.squaredup.com/hc/en-us/articles/4410635417233-CVE-2021-40092-Stored-cross-site-scripting-Image-tile-	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-40091`	vulnerable	2026-06-08 05:35:16.790388	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-9388`	vulnerable	2026-06-08 05:28:01.516455	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.