Marval Msm
Approved changes feed: RSS · Atom
cpe:2.3:a:marvalglobal:marval_msm:14.19.0.12476:*:*:*:*:*:*:*
part: a version: 14.19.0.12476 update: *
| Vendor | Marvalglobal (6fe20c97-2b35-5e94-b95c-ba1e14656c96) |
|---|---|
| Product | Marval Msm (518b9d11-d912-547d-afdc-64612c0599a6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-31887 |
vulnerable | 2026-06-08 05:44:42.417506 |
Details available
Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the organization, this means that the user can also escalate achieve Privilege Escalation by changing the administrator password.
Published: 2022-06-28T21:09:43.000Z
Updated: 2024-08-03T07:26:01.282Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31886 |
vulnerable | 2026-06-08 05:44:42.417094 |
Details available
Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sending the user a malicious form.
Published: 2022-06-28T20:54:46.000Z
Updated: 2024-08-03T07:26:01.404Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31885 |
vulnerable | 2026-06-08 05:44:42.416586 |
Details available
Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts.
Published: 2022-06-28T20:51:11.000Z
Updated: 2024-08-03T07:26:01.217Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31884 |
vulnerable | 2026-06-08 05:44:42.416143 |
Details available
Marval MSM v14.19.0.12476 has an Improper Access Control vulnerability which allows a low privilege user to delete other users API Keys including high privilege and the Administrator users API Keys.
Published: 2022-06-28T21:04:49.000Z
Updated: 2024-08-03T07:26:01.291Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31883 |
vulnerable | 2026-06-08 05:44:42.415534 |
Details available
Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able to see other users API Keys including the Admins API Keys.
Published: 2022-06-28T20:58:26.000Z
Updated: 2024-08-03T07:26:01.194Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.