GCVE - cpe:2.3:a:dexma:dexgate:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dexma:dexgate:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Dexma (`d30718ca-0ee0-5034-a00b-92c9522f83fc`)
Product	Dexgate (`5ba125a8-3e80-56a8-92f1-3a11794f7c02`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-42666`	vulnerable	2026-06-08 06:11:08.858681	Exposure of Sensitive Information to an Unauthorized Actor in DEXMA DEXGate MEDIUM (5.3) The affected product is vulnerable to an exposure of sensitive information to an unauthorized actor vulnerability, which may allow an attacker to create malicious requests for obtaining the information of the version about the web server used. Published: 2023-10-19T18:21:32.615Z Updated: 2024-09-12T17:53:51.103Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-271-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-42435`	vulnerable	2026-06-08 06:11:08.061954	Cross-Site Request Forgery in DEXMA DEXGate MEDIUM (5.5) The affected product is vulnerable to a cross-site request forgery vulnerability, which may allow an attacker to perform actions with the permissions of a victim user. Published: 2023-10-19T18:19:28.035Z Updated: 2024-09-11T20:09:11.707Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-271-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41089`	vulnerable	2026-06-08 06:11:05.189128	Improper Authentication in DEXMA DEXGate HIGH (8) The affected product is vulnerable to an improper authentication vulnerability, which may allow an attacker to impersonate a legitimate user as long as the device keeps the session active, since the attack takes advantage of the cookie header to generate "legitimate" requests. Published: 2023-10-19T18:13:25.005Z Updated: 2024-09-12T17:54:32.972Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-271-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41088`	vulnerable	2026-06-08 06:11:05.187822	Cleartext Transmission of Sensitive Information in DEXMA DEXGate MEDIUM (6.3) The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker with access to the network, where clients have access to the DexGate server, could capture traffic. The attacker can later us the information within it to access the application. Published: 2023-10-19T18:08:34.103Z Updated: 2024-09-11T20:09:33.344Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-271-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40153`	vulnerable	2026-06-08 06:09:41.321774	Cross-site Scripting in DEXMA DEXGate MEDIUM (5.4) The affected product is vulnerable to a cross-site scripting vulnerability, which could allow an attacker to access the web application to introduce arbitrary Java Script by injecting an XSS payload into the 'hostname' parameter of the vulnerable software. Published: 2023-10-19T18:05:42.988Z Updated: 2024-09-11T20:09:53.916Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-271-02	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Dexgate

Notes

PURL mappings

Vulnerability references

Contribute