GCVE - cpe:2.3:a:siren:investigate:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:siren:investigate:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Siren (`ee87030f-db49-504f-b513-fbb9a9721812`)
Product	Investigate (`7392e3ff-37ac-5e17-aefc-45188c70c06a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-35857`	vulnerable	2026-06-08 06:06:27.918522	Details available In Siren Investigate before 13.2.2, session keys remain active even after logging out. Published: 2023-06-19T00:00:00.000Z Updated: 2024-12-11T16:56:22.339Z Open on db.gcve.eu Reference links https://community.siren.io/c/announcements https://docs.support.siren.io/siren-platform-user-guide/13.2/release-notes.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-47544`	vulnerable	2026-06-08 05:50:40.735594	Details available An issue was discovered in Siren Investigate before 12.1.7. Script variable whitelisting is insufficiently sandboxed. Published: 2023-01-05T00:00:00.000Z Updated: 2025-04-10T14:32:58.178Z Open on db.gcve.eu Reference links https://docs.support.siren.io/siren-platform-user-guide/12.1/release-notes.html https://docs.support.siren.io/siren-platform-user-guide/13.0/release-notes.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-47543`	vulnerable	2026-06-08 05:50:40.735026	Details available An issue was discovered in Siren Investigate before 12.1.7. There is an ACL bypass on global objects. Published: 2023-01-05T00:00:00.000Z Updated: 2025-04-10T14:35:51.694Z Open on db.gcve.eu Reference links https://docs.support.siren.io/siren-platform-user-guide/12.1/release-notes.html https://docs.support.siren.io/siren-platform-user-guide/13.0/release-notes.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36794`	vulnerable	2026-06-08 05:32:52.533592	Details available In Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert application, TLS verifications are disabled globally in the Siren Investigate main process. Published: 2021-11-02T13:26:20.000Z Updated: 2024-08-04T01:01:59.331Z Open on db.gcve.eu Reference links https://community.siren.io/c/announcements https://docs.siren.io/index https://docs.siren.io/siren-platform-user-guide/11.1/release-notes.html#_security_fixes_3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31216`	vulnerable	2026-06-08 05:31:52.279103	Details available Siren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built-in image proxy route (which is enabled by default). An attacker with access to the Investigate installation can specify an arbitrary URL in the parameters of the image proxy route and fetch external URLs as the Investigate process on the host. Published: 2021-07-19T12:29:21.000Z Updated: 2024-08-03T22:55:52.913Z Open on db.gcve.eu Reference links https://community.siren.io/c/announcements https://docs.siren.io/siren-platform-user-guide/11.1/release-notes.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.