Approved changes feed: RSS · Atom

cpe:2.3:a:softing:opc_toolbox:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSofting (4b32be6d-69ed-5932-83e7-5560b6afc48d)
ProductOpc Toolbox (9ae02620-7598-5908-9aad-745fe4bf1766)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-29661 vulnerable 2026-06-08 05:31:26.705527 Details available
Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diag_values.html Stored XSS via the ITEMLISTVALUES##ITEMID parameter, resulting in JavaScript payload injection into the trace file. This payload will then be triggered every time an authenticated user browses the page containing it.
Published: 2021-04-02T18:43:44.000Z
Updated: 2024-08-03T22:11:06.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29660 vulnerable 2026-06-08 05:31:26.705015 Details available
A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the administrative password by inducing the Administrator user to browse a URL controlled by an attacker.
Published: 2021-04-02T18:42:02.000Z
Updated: 2024-08-03T22:11:06.080Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.