Sisqualwfm

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sisqualwfm:sisqualwfm:*:*:*:*:*:android:*:*

part: a version: * update: *

VendorSisqualwfm (e6be2402-59a3-5349-826f-4a185e2ef3eb)
ProductSisqualwfm (04a9cf5a-cddc-574a-b5ce-d8886683dfef)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-36085 vulnerable 2026-06-08 06:06:28.540321 Details available
The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" endpoint. By modifying the HTTP Host header, an attacker can change webpage links and even redirect users to arbitrary or malicious locations. This can lead to phishing attacks, malware distribution, and unauthorized access to sensitive resources.
Published: 2023-10-24T00:00:00.000Z
Updated: 2024-08-02T16:37:41.269Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.