Approved changes feed: RSS · Atom

cpe:2.3:a:sync:oxygen_content_fusion:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSync (87e5648e-0140-5d85-b0fe-eda3e3aa7cff)
ProductOxygen Content Fusion (f27ab556-f3db-540f-8014-d2ef56a13f28)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-26559 vulnerable 2026-06-08 05:57:39.974164 Details available
A directory traversal vulnerability in Oxygen XML Web Author before 25.0.0.3 build 2023021715 and Oxygen Content Fusion before 5.0.3 build 2023022015 allows an attacker to read files from a WEB-INF directory via a crafted HTTP request. (XML Web Author 24.1.0.3 build 2023021714 and 23.1.1.4 build 2023021715 are also fixed versions.)
Published: 2023-04-14T00:00:00.000Z
Updated: 2025-02-07T16:05:03.962Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.