Approved changes feed: RSS · Atom
cpe:2.3:a:tcman:gim:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Tcman (ced398ff-b9e4-5a7a-a979-82a5bbca5379) |
|---|---|
| Product | Gim (bc69e7f0-3f96-5903-bac5-5342739f847c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41015 |
vulnerable | 2026-06-08 07:25:06.528418 |
User Enumeration vulnerability in TCMAN GIM
User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetUserQuestionAndAnswer' in '/WS/PDAWebService.asmx'.
Published: 2025-12-02T13:18:25.486Z
Updated: 2025-12-02T14:23:47.055Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41014 |
vulnerable | 2026-06-08 07:25:06.528074 |
User Enumeration vulnerability in TCMAN GIM
User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetLastDatePasswordChange' in '/WS/PDAWebService.asmx'.
Published: 2025-12-02T13:18:13.267Z
Updated: 2025-12-02T14:23:16.382Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41013 |
vulnerable | 2026-06-08 07:25:06.527565 |
SQL injection vulnerability in TCMAN GIM
SQL injection vulnerability in TCMAN GIM v11 in version 20250304. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a GET request using the 'idmant' parameter in '/PC/frmEPIS.aspx'.
Published: 2025-12-02T13:13:57.112Z
Updated: 2025-12-02T14:22:40.733Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41012 |
vulnerable | 2026-06-08 07:25:06.523972 |
Unauthorized access vulnerability in TCMAN GIM
Unauthorized access vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system by using the 'pda:userId' and 'pda:newPassword' parameters with 'soapaction UnlockUser’ in '/WS/PDAWebService.asmx'.
Published: 2025-12-02T13:12:43.473Z
Updated: 2025-12-02T13:25:47.954Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40670 |
vulnerable | 2026-06-08 07:25:05.348535 |
Incorrect Authorization vulnerability in TCMAN GIM
Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to create a user and assign it many privileges by sending a POST request to /PC/frmGestionUser.aspx/updateUser.
Published: 2025-06-09T12:26:28.525Z
Updated: 2025-06-09T13:01:52.381Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40669 |
vulnerable | 2026-06-08 07:25:05.348116 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40668 |
vulnerable | 2026-06-08 07:25:05.347799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40667 |
vulnerable | 2026-06-08 07:25:05.347252 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40666 |
vulnerable | 2026-06-08 07:25:05.346785 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40665 |
vulnerable | 2026-06-08 07:25:05.346463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40664 |
vulnerable | 2026-06-08 07:25:05.346109 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40625 |
vulnerable | 2026-06-08 07:25:05.286001 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40624 |
vulnerable | 2026-06-08 07:25:05.285549 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40623 |
vulnerable | 2026-06-08 07:25:05.285084 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40622 |
vulnerable | 2026-06-08 07:25:05.284626 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40621 |
vulnerable | 2026-06-08 07:25:05.284046 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-40620 |
vulnerable | 2026-06-08 07:25:05.282610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36277 |
vulnerable | 2026-06-08 05:46:06.499590 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36276 |
vulnerable | 2026-06-08 05:46:06.499126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4046 |
vulnerable | 2026-06-08 05:38:08.226646 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40853 |
vulnerable | 2026-06-08 05:35:19.175274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40852 |
vulnerable | 2026-06-08 05:35:19.174875 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40851 |
vulnerable | 2026-06-08 05:35:19.174469 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40850 |
vulnerable | 2026-06-08 05:35:19.172384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.