Approved changes feed: RSS · Atom

cpe:2.3:a:visam:vbase_pro-rt/_server-rt_(web_remote):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVisam (b81bf73d-0d07-526c-a087-936f3ea763b3)
ProductVbase Pro Rt/ Server Rt (Web Remote) (fe6239f7-8b00-5de0-b469-f4337252fde3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-42537 vulnerable 2026-06-08 05:35:22.295353 VISAM VBASE Editor Improper Restriction of XML
MEDIUM (5.9)
VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
Published: 2022-07-27T20:20:22.000Z
Updated: 2025-04-17T15:50:48.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42535 vulnerable 2026-06-08 05:35:22.288240 VISAM VBASE Editor Cross Site Scripting
MEDIUM (5.3)
VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the data is placed in output used as a public-facing webpage.
Published: 2022-07-27T20:21:04.000Z
Updated: 2025-04-17T15:50:12.708Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38417 vulnerable 2026-06-08 05:33:47.282031 VISAM VBASE Editor Improper Access Control
HIGH (7.4)
VISAM VBASE version 11.6.0.6 is vulnerable to improper access control via the web-remote endpoint, which may allow an unauthenticated user viewing access to folders and files in the directory listing.
Published: 2022-07-27T20:20:43.000Z
Updated: 2025-04-17T15:50:29.866Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.