Approved changes feed: RSS · Atom
cpe:2.3:a:netmotionsoftware:mobility:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Netmotionsoftware (a2852ebc-1fcf-5677-8a27-e3d7c6d1bb1c) |
|---|---|
| Product | Mobility (799ccfd4-a23c-5ebc-80d2-ddc9f10c3eaa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-40067 |
vulnerable | 2026-06-08 05:35:16.777722 |
Details available
The access controls on the Mobility read-write API improperly validate user access permissions; this API is disabled by default. If the API is manually enabled, attackers with both network access to the API and valid credentials can read and write data to it; regardless of access control group membership settings. This vulnerability is fixed in Mobility v12.14.
Published: 2021-09-16T11:25:21.000Z
Updated: 2024-08-04T02:27:31.644Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40066 |
vulnerable | 2026-06-08 05:35:16.777156 |
Details available
The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both network access to the API and valid credentials can read data from it; regardless of access control group membership settings. This vulnerability is fixed in Mobility v11.76 and Mobility v12.14.
Published: 2021-09-16T11:18:27.000Z
Updated: 2024-08-04T02:27:31.554Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.