Approved changes feed: RSS · Atom

cpe:2.3:a:janitza:gridvis:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJanitza (6805cb23-b84f-50af-bb88-2f0896ee4475)
ProductGridvis (1124dcb0-13e3-5580-aeba-d5ee4426e6e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-50895 vulnerable 2026-06-08 06:16:16.965610 Details available
In Janitza GridVis through 9.0.66, exposed dangerous methods in the de.janitza.pasw.project.server.ServerDatabaseProject project load functionality allow remote authenticated administrative users to execute arbitrary Groovy code.
Published: 2024-03-26T00:00:00.000Z
Updated: 2025-03-13T18:48:59.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50894 vulnerable 2026-06-08 06:16:16.965062 Details available
In Janitza GridVis through 9.0.66, use of hard-coded credentials in the de.janitza.pasw.feature.impl.activators.PasswordEncryption password encryption function allows remote authenticated administrative users to discover cleartext database credentials contained in error report information.
Published: 2024-03-26T00:00:00.000Z
Updated: 2024-08-05T16:22:37.666Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.