Approved changes feed: RSS · Atom

cpe:2.3:a:deltaflow_project:deltaflow:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDeltaflow Project (7b1c7bec-a252-5d88-b4ed-db4a9736230a)
ProductDeltaflow (fe8b0f0d-04b1-53bf-921d-7dcbd70d85fe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28173 vulnerable 2026-06-08 05:31:23.124945 Vangene deltaFlow E-platform - Arbitrary File Upload
CRITICAL (9.8)
The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers can upload and execute arbitrary files without login.
Published: 2021-04-06T11:20:28.608Z
Updated: 2024-09-16T22:55:37.530Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28172 vulnerable 2026-06-08 05:31:23.124475 Vangene deltaFlow E-platform - Path Traversal
HIGH (7.5)
There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage.
Published: 2021-04-06T11:20:27.924Z
Updated: 2024-09-17T03:54:53.595Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28171 vulnerable 2026-06-08 05:31:23.123992 Vangene deltaFlow E-platform - Broken Authentication
CRITICAL (9.8)
The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie.
Published: 2021-04-06T11:20:27.171Z
Updated: 2024-09-16T23:41:41.900Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.