Vigilant Software Suite (Mastermed Dashboard)
Approved changes feed: RSS · Atom
cpe:2.3:a:fresenius_kabi:vigilant_software_suite_(mastermed_dashboard):*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Fresenius Kabi (3bccb4e2-8874-5476-92ac-25e49cc76ff6) |
|---|---|
| Product | Vigilant Software Suite (Mastermed Dashboard) (721db8e2-0b44-5b9e-96c0-46ea75a8fade) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-44464 |
vulnerable | 2026-06-08 05:36:45.810339 | db.gcve.eu details are currently unavailable. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43355 |
vulnerable | 2026-06-08 05:36:43.291165 | db.gcve.eu details are currently unavailable. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33848 |
vulnerable | 2026-06-08 05:32:12.580582 |
Fresenius Kabi Agilia Connect Infusion System cross site scripting
MEDIUM (5.4)
Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks. An attacker could inject JavaScript in a GET parameter of HTTP requests and perform unauthorized actions such as stealing internal information and performing actions in context of an authenticated user.
Published: 2022-01-21T18:17:43.000Z
Updated: 2025-04-16T16:46:52.196Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33846 |
vulnerable | 2026-06-08 05:32:12.549246 |
Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
MEDIUM (5.9)
Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 issues authentication tokens to authenticated users that are signed with a symmetric encryption key. An attacker in possession of the key can issue valid JWTs and impersonate arbitrary users.
Published: 2022-01-21T18:17:37.000Z
Updated: 2025-04-16T18:01:40.236Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23207 |
vulnerable | 2026-06-08 05:30:02.438172 |
Fresenius Kabi Agilia Connect Infusion System plaintext storage of a password
MEDIUM (6.5)
An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed version 2.0.1.3 application and impersonate arbitrary users. An attacker could manipulate RabbitMQ queues and messages by impersonating users.
Published: 2022-01-21T18:17:39.000Z
Updated: 2025-04-16T16:47:32.782Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23195 |
vulnerable | 2026-06-08 05:30:02.390979 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.