Vitals Enterprise Social Platform

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gss:vitals_enterprise_social_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGss (1471f81f-c4dd-5fa4-8486-297b7765b257)
ProductVitals Enterprise Social Platform (95678a94-9f76-5725-8e1f-b5e3227f7ed8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-41357 vulnerable 2026-06-08 06:11:06.005000 Galaxy Software Services Vitals ESP - Arbitrary File Upload
HIGH (8.8)
Galaxy Software Services Corporation Vitals ESP is an online knowledge base management portal, it has insufficient filtering and validation during file upload. An authenticated remote attacker with general user privilege can exploit this vulnerability to upload and execute scripts onto arbitrary directories to perform arbitrary system operations or disrupt service.
Published: 2023-11-03T06:09:18.072Z
Updated: 2024-09-05T15:19:03.974Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37291 vulnerable 2026-06-08 06:08:15.089899 Galaxy Software Services Vitals ESP - Use of Hard-coded Cryptographic Key
HIGH (8.6)
Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. An unauthenticated remote attacker can generate a valid token parameter and exploit this vulnerability to access system to operate processes and access data. This issue affects Vitals ESP: from 3.0.8 through 6.2.0.
Published: 2023-07-21T03:02:50.129Z
Updated: 2024-10-24T14:31:28.873Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.