Approved changes feed: RSS · Atom

cpe:2.3:a:pleasanter:pleasanter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPleasanter (aac54069-c492-589f-b3d1-15dce5452dfb)
ProductPleasanter (2c89ba21-0a05-595d-9e45-5d9f2a8b1429)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21584 vulnerable 2026-06-08 06:27:35.553850 Details available
Pleasanter 1.3.49.0 and earlier contains a cross-site scripting vulnerability. If an attacker tricks the user to access the product with a specially crafted URL and perform a specific operation, an arbitrary script may be executed on the web browser of the user.
Published: 2024-03-12T07:25:44.452Z
Updated: 2025-03-13T16:09:31.719Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46688 vulnerable 2026-06-08 06:14:22.788883 Details available
Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL.
Published: 2023-12-06T08:40:47.953Z
Updated: 2024-08-02T20:53:20.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45210 vulnerable 2026-06-08 06:12:42.294386 Details available
Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticated attacker to view the temporary files uploaded by other users who are not permitted to access.
Published: 2023-12-06T08:40:41.155Z
Updated: 2025-05-28T15:49:58.291Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34439 vulnerable 2026-06-08 06:06:25.616039 Details available
Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser.
Published: 2023-12-06T08:40:53.373Z
Updated: 2024-08-02T16:10:07.263Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32608 vulnerable 2026-06-08 06:04:46.592442 Details available
Directory traversal vulnerability in Pleasanter (Community Edition and Enterprise Edition) 1.3.39.2 and earlier versions allows a remote authenticated attacker to alter an arbitrary file on the server.
Published: 2023-06-30T02:15:52.270Z
Updated: 2024-12-05T15:23:26.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32607 vulnerable 2026-06-08 06:04:46.591961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30758 vulnerable 2026-06-08 06:04:40.954727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.