Approved changes feed: RSS · Atom
cpe:2.3:a:arcinformatique:pcvue:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Arcinformatique (acc6cdee-63d0-514b-b780-bab8a2f85b4e) |
|---|---|
| Product | Pcvue (11f52b06-86cd-5c77-afa0-773c87042809) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1698 |
vulnerable | 2026-06-08 07:49:09.385077 |
HTTP Host header vulnerability in WebClient and WebScheduler web apps
A HTTP Host header attack vulnerability affects WebClient and the WebScheduler web apps of PcVue in version 15.0.0 through 16.3.3 included, allowing a remote attacker to inject harmful payloads that manipulate server-side behavior.
This vulnerability only affects the endpoints /Authentication/ExternalLogin, /Authentication/AuthorizationCodeCallback and /Authentication/Logout
of the WebClient and WebScheduler web apps.
Published: 2026-02-26T07:58:00.626Z
Updated: 2026-03-26T08:25:09.394Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1697 |
vulnerable | 2026-06-08 07:49:09.384524 |
Use of unsecure cookies for GraphicalData web service and WebClient web app
The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included.
Published: 2026-02-26T07:57:46.166Z
Updated: 2026-03-26T08:24:24.828Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1696 |
vulnerable | 2026-06-08 07:49:09.383918 |
Missing security HTTP headers
Some HTTP security headers are not properly set by the web server when sending responses to the client application.
Published: 2026-02-26T07:57:29.109Z
Updated: 2026-03-26T08:23:46.958Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1695 |
vulnerable | 2026-06-08 07:49:09.383319 |
XSS vulnerability upon unsuccessful authentication
An XSS vulnerability affects the OAuth web services used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It might allow a remote attacker to trick a legitimate user into loading content from another site upon unsuccessful user authentication on an unknown application (unknown client_id).
This vulnerability only affects the error page of the OAuth server.
Published: 2026-02-26T07:57:11.931Z
Updated: 2026-03-26T08:23:05.985Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1694 |
vulnerable | 2026-06-08 07:49:09.382642 |
Server configuration details in HTTP headers
HTTP headers are added by the default configuration of IIS and ASP.net, and are not removed at the deployment phase of the webservices used by the WebVue, WebScheduler, TouchVue and SnapVue features of PcVue in version 12.0.0 through 16.3.3 included. It unnecessarily exposes sensitive information about the server configuration.
Published: 2026-02-26T07:56:57.048Z
Updated: 2026-03-26T08:22:30.221Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1693 |
vulnerable | 2026-06-08 07:49:09.381891 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1692 |
vulnerable | 2026-06-08 07:49:09.381166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4312 |
vulnerable | 2026-06-08 05:51:37.182698 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4311 |
vulnerable | 2026-06-08 05:51:37.182092 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2569 |
vulnerable | 2026-06-08 05:43:35.827605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.