Approved changes feed: RSS · Atom
cpe:2.3:a:anchore:anchore:*:*:*:*:enterprise:*:*:*
part: a version: * update: *
| Vendor | Anchore (8c661697-2119-5958-a5c4-8cd8ec010026) |
|---|---|
| Product | Anchore (17c286c4-5056-50ed-8e84-067509655c16) |
| Edition | * |
| Language | * |
| Software edition | enterprise |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25076 |
vulnerable | 2026-06-08 07:53:18.931141 |
Anchore Enterprise GraphQL Reports API SQL injection
HIGH (7.3)
Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API. An authenticated attacker that is able to access the GraphQL API could execute arbitrary SQL instructions resulting in modifications to the data contained in the Anchore Enterprise database.
Published: 2026-03-12T21:07:46.502Z
Updated: 2026-03-13T13:08:47.633Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1766 |
vulnerable | 2026-06-08 05:39:13.880902 |
Details available
Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials. anchorectl will add the credentials used to access Anchore Enterprise API in the Software Bill of Materials (SBOM) generated by anchorectl. Users of anchorectl version 0.1.4 should upgrade to anchorectl version 0.1.5 to resolve this issue.
Published: 2022-07-20T16:10:10.790Z
Updated: 2024-09-16T20:36:35.624Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.