Approved changes feed: RSS · Atom
cpe:2.3:a:kiuwan:sast:master.1808.p685.q13371:*:*:*:*:*:*:*
part: a version: master.1808.p685.q13371 update: *
| Vendor | Kiuwan (68b99edd-4a0f-5fcb-ae69-37361344c61c) |
|---|---|
| Product | Sast (e200ecc5-d5f6-507e-a3c8-5792f29e63dc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-49112 |
vulnerable | 2026-06-08 06:14:28.511713 |
Insecure Direct Object Reference in Kiuwan SAST
Kiuwan provides an API endpoint
/saas/rest/v1/info/application
to get information about any
application, providing only its name via the "application" parameter. This endpoint lacks proper access
control mechanisms, allowing other authenticated users to read
information about applications, even though they have not been granted
the necessary rights to do so.
This issue affects Kiuwan SAST: <master.1808.p685.q13371
Published: 2024-06-20T12:36:18.575Z
Updated: 2025-11-04T17:13:04.026Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49111 |
vulnerable | 2026-06-08 06:14:28.511013 |
Reflected Cross-Site-Scripting in Kiuwan SAST
For Kiuwan installations with SSO (single sign-on) enabled, an
unauthenticated reflected cross-site scripting attack can be performed
on the login page "login.html". This is possible due to the request parameter "message" values
being directly included in a JavaScript block in the response. This is
especially critical in business environments using AD SSO
authentication, e.g. via ADFS, where attackers could potentially steal
AD passwords.
This issue affects Kiuwan SAST: <master.1808.p685.q13371
Published: 2024-06-20T12:34:38.170Z
Updated: 2025-11-04T17:13:02.645Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.