Approved changes feed: RSS · Atom
cpe:2.3:a:idm_sistemas_qsige:qsige:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Idm Sistemas Qsige (e5e845fb-9187-5a34-9b1a-a3d76e70f972) |
|---|---|
| Product | Qsige (449bc19b-598f-5e8d-af9b-d851d57503cd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4103 |
vulnerable | 2026-06-08 06:16:11.480140 |
Multiple vulnerabilities in IDM Sistemas QSige
HIGH (8.8)
QSige statistics are affected by a remote SQLi vulnerability. It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS or information disclosure. As a prerequisite, it is necessary to log into the application.
Published: 2023-10-03T11:30:45.879Z
Updated: 2024-09-19T20:22:31.428Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4102 |
vulnerable | 2026-06-08 06:16:11.479398 |
Multiple vulnerabilities in IDM Sistemas QSige
HIGH (8.8)
QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.
Published: 2023-10-03T11:29:46.537Z
Updated: 2024-09-19T20:24:32.988Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4101 |
vulnerable | 2026-06-08 06:16:11.479014 |
Multiple vulnerabilities in IDM Sistemas QSige
HIGH (8.8)
The QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.
Published: 2023-10-03T11:26:49.190Z
Updated: 2024-09-23T17:06:19.046Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4100 |
vulnerable | 2026-06-08 06:16:11.478313 |
Multiple vulnerabilities in IDM Sistemas QSige
MEDIUM (6.5)
Allows an attacker to perform XSS attacks stored on certain resources. Exploiting this vulnerability can lead to a DoS condition, among other actions.
Published: 2023-10-03T11:22:28.091Z
Updated: 2024-09-06T14:11:02.084Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4097 |
vulnerable | 2026-06-08 06:16:11.474705 |
Multiple vulnerabilities in IDM Sistemas QSige
HIGH (8.8)
The file upload functionality is not implemented correctly and allows uploading of any type of file. As a prerequisite, it is necessary for the attacker to log into the application with a valid username.
Published: 2023-10-03T10:46:06.241Z
Updated: 2024-09-19T20:02:40.437Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.