Eservices / Envoice
Approved changes feed: RSS · Atom
cpe:2.3:a:emuse:eservices_/_envoice:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Emuse (697283a7-5b6e-599d-b893-54f26852ace1) |
|---|---|
| Product | Eservices / Envoice (e7b03d17-71bf-504c-ba61-02a6343dd294) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-36723 |
vulnerable | 2026-06-08 05:32:52.375306 |
Emuse - eServices / eNvoice Exposure Of Private Personal Information
MEDIUM (6.1)
Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the service.
Published: 2021-12-29T14:12:48.982Z
Updated: 2024-09-16T17:18:07.632Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36722 |
vulnerable | 2026-06-08 05:32:52.373973 |
Emuse - eServices / eNvoice SQL injection
HIGH (7.1)
Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints. The SQLi caused by CWE-209: Generation of Error Message Containig Sensetive Information, showing parts of the aspx code and the webroot location , information an attacker can leverage to further compromise the host.
Published: 2021-12-29T14:13:38.766Z
Updated: 2024-09-16T18:38:48.510Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.