Approved changes feed: RSS · Atom

cpe:2.3:a:archibus:archibus_web_central:2022.03.01.107:*:*:*:*:*:*:*

part: a version: 2022.03.01.107 update: *

VendorArchibus (7ff10a0c-80d2-5ff4-87b5-146e649161b5)
ProductArchibus Web Central (53133265-e5ba-5b6b-9676-aae8668a4df9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-45167 vulnerable 2026-06-08 05:50:35.893053 Details available
MEDIUM (4.3)
An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to access the profile information of all connected users.
Published: 2023-01-10T00:00:00.000Z
Updated: 2025-05-30T16:02:27.557Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45166 vulnerable 2026-06-08 05:50:35.892671 Details available
MEDIUM (6.5)
An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of user-controlled parameters that are used to act on the data returned to the user. It allows a basic user to access data unrelated to their role.
Published: 2023-01-10T00:00:00.000Z
Updated: 2025-05-30T16:02:15.041Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45164 vulnerable 2026-06-08 05:50:35.890141 Details available
MEDIUM (4.3)
An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user to cancel (delete) a booking, created by someone else - even if this basic user is not a member of the booking
Published: 2023-01-10T00:00:00.000Z
Updated: 2025-05-30T16:02:11.149Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.