Approved changes feed: RSS · Atom

cpe:2.3:a:pentasecurity:wapples:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPentasecurity (f453def1-bbd4-5e7e-8930-90c15283f200)
ProductWapples (d9e8aa39-3cf0-5b97-add6-98f4cd05da93)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-35413 vulnerable 2026-06-08 05:46:04.883551 Details available
WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information (such as SSL keys) via an HTTPS request to the /webapi/ URI on port 443 or 5001.
Published: 2022-09-13T22:00:24.000Z
Updated: 2024-08-03T09:36:44.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31324 vulnerable 2026-06-08 05:43:40.719743 Details available
An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request.
Published: 2022-09-13T22:00:31.000Z
Updated: 2024-08-03T07:19:05.639Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31322 vulnerable 2026-06-08 05:43:40.717978 Details available
Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged executables.
Published: 2022-09-13T22:00:36.000Z
Updated: 2024-08-03T07:19:05.636Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.