Openlitespeed
Approved changes feed: RSS · Atom
cpe:2.3:a:litespeed_technologies:openlitespeed:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Litespeed Technologies (ac0c24dc-d46e-5b14-9f8f-40ac0cdc1b05) |
|---|---|
| Product | Openlitespeed (b250e1c2-2b89-554a-a12f-6800e0e5a454) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-31386 |
vulnerable | 2026-06-08 07:57:14.800118 |
Details available
HIGH (7.2)
OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege.
Published: 2026-03-16T05:21:13.948Z
Updated: 2026-03-16T15:29:03.838Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-47855 |
vulnerable | 2026-06-08 05:38:07.789136 |
Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting
HIGH (7.2)
Openlitespeed 1.7.9 contains a stored cross-site scripting vulnerability in the dashboard's Notes parameter that allows administrators to inject malicious scripts. Attackers can craft a payload in the Notes field during listener configuration that will execute when an administrator clicks on the Default Icon.
Published: 2026-01-21T17:27:38.854Z
Updated: 2026-03-05T01:28:53.853Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.