Approved changes feed: RSS · Atom

cpe:2.3:a:openwaygroup:way4:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenwaygroup (1fbad854-15ff-5375-801d-e98bf292cbea)
ProductWay4 (aadd58ea-1482-5943-ae37-a4faa4fc8d61)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-35060 vulnerable 2026-06-08 05:32:17.600162 Details available
/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system.
Published: 2021-10-11T08:24:26.000Z
Updated: 2024-08-04T00:33:50.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35059 vulnerable 2026-06-08 05:32:17.599634 Details available
OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter.
Published: 2021-10-11T08:19:54.000Z
Updated: 2024-08-04T00:33:50.606Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.