Approved changes feed: RSS · Atom
cpe:2.3:a:synopsys:coverity:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Synopsys (0fda76b2-e33c-5c51-b457-5b62b0d59f73) |
|---|---|
| Product | Coverity (25f2774f-d93e-53aa-b56b-d8612fba1b13) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-23849 |
vulnerable | 2026-06-08 05:56:04.540130 |
Details available
Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability. Any web service hosted on the same sub domain can set a cookie for the whole subdomain which can be used to bypass other mitigations in place for malicious purposes. CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C
Published: 2023-02-06T00:00:00.000Z
Updated: 2025-03-25T19:22:04.241Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1663 |
vulnerable | 2026-06-08 05:52:36.469649 |
Authenticated Resources Accessible via Forced Browsing
MEDIUM (6.5)
Coverity versions prior to 2023.3.2 are vulnerable to forced browsing, which exposes authenticated resources to unauthorized actors. The root cause of this vulnerability is an insecurely configured servlet mapping for the underlying Apache Tomcat server. As a result, the downloads directory and its contents are accessible. 5.9 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C)
Published: 2023-03-29T13:16:40.269Z
Updated: 2025-02-12T16:19:38.925Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.