Approved changes feed: RSS · Atom

cpe:2.3:a:bosch:videojet_multi_4000:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e)
ProductVideojet Multi 4000 (35d9cb8d-e12b-5686-9299-1d397d81cab9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40184 vulnerable 2026-06-08 05:48:24.126814 Stored Cross Site Scripting (XSS) in VIDEOJET multi 4000
MEDIUM (5.1)
Incomplete filtering of JavaScript code in different configuration fields of the web based interface of the VIDEOJET multi 4000 allows an attacker with administrative credentials to store JavaScript code which will be executed for all administrators accessing the same configuration option.
Published: 2022-10-27T00:00:00.000Z
Updated: 2025-05-09T19:15:40.818Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40183 vulnerable 2026-06-08 05:48:24.124869 Reflected Cross Site Scripting (XSS) in VIDEOJET multi 4000
MEDIUM (5.8)
An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in the context of the user.
Published: 2022-10-27T00:00:00.000Z
Updated: 2025-05-05T19:04:45.654Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.