Approved changes feed: RSS · Atom
cpe:2.3:a:business-dna_solutions_gmbh:topease:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Business Dna Solutions Gmbh (e4e6bd79-5afe-5c08-a9d9-e53ff2d3f711) |
|---|---|
| Product | Topease (933eae2a-e7d6-5b09-959b-60a22c1e8ffb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-42545 |
vulnerable | 2026-06-08 05:35:22.304260 |
Insufficient Session Expiration in TopEase
HIGH (8.1)
An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions.
Published: 2021-11-30T11:28:15.000Z
Updated: 2024-08-04T03:38:49.303Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42544 |
vulnerable | 2026-06-08 05:35:22.303879 |
Lack of Rate limiting in Authentication in TopEase
HIGH (7.5)
Missing Rate Limiting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on the Login Form allows an unauthenticated remote attacker to perform multiple login attempts, which facilitates gaining privileges.
Published: 2021-11-30T11:28:14.000Z
Updated: 2024-08-04T03:38:49.221Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42123 |
vulnerable | 2026-06-08 05:35:21.895899 |
Missing Upload Filter in TopEase
HIGH (7.3)
Unrestricted File Upload in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 in the File Upload Functions allows an authenticated remote attacker with Upload privileges to upload files with any file type, enabling client-side attacks.
Published: 2021-11-30T11:28:14.000Z
Updated: 2024-08-04T03:30:37.552Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42122 |
vulnerable | 2026-06-08 05:35:21.895556 |
Denial of Service via Invalid Object Attribute in TopEase
MEDIUM (4.3)
Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on an object’s attributes with numeric format allows an authenticated remote attacker with Object Modification privileges to insert an unexpected format, which makes the affected attribute non-editable.
Published: 2021-11-30T11:28:13.000Z
Updated: 2024-08-04T03:30:37.576Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42121 |
vulnerable | 2026-06-08 05:35:21.895078 |
Denial of Service via Invalid Date Format in TopEase
MEDIUM (4.3)
Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on an object’s date attribute(s) allows an authenticated remote attacker with Object Modification privileges to insert an unexpected format into date fields, which leads to breaking the object page that the date field is present.
Published: 2021-11-30T11:28:12.000Z
Updated: 2024-08-04T03:30:36.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42120 |
vulnerable | 2026-06-08 05:35:21.894756 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42119 |
vulnerable | 2026-06-08 05:35:21.894422 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42118 |
vulnerable | 2026-06-08 05:35:21.894046 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42117 |
vulnerable | 2026-06-08 05:35:21.893498 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42116 |
vulnerable | 2026-06-08 05:35:21.892906 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42115 |
vulnerable | 2026-06-08 05:35:21.891956 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.