Approved changes feed: RSS · Atom

cpe:2.3:a:tyler_technologies:court_case_management_plus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTyler Technologies (0d9e5b62-4cab-5d2b-8934-58f280333856)
ProductCourt Case Management Plus (14fbfb3f-6a5a-503b-9d3d-74e590cb7554)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6375 vulnerable 2026-06-08 06:19:47.071254 Tyler Technologies Magistrate Court Case Management Plus stores backups insecurely
MEDIUM (5.3)
Tyler Technologies Court Case Management Plus may store backups in a location that can be accessed by a remote, unauthenticated attacker. Backups may contain sensitive information such as database credentials.
Published: 2023-11-30T17:54:25.462Z
Updated: 2024-08-02T08:28:21.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6344 vulnerable 2026-06-08 06:19:46.992843 Tyler Technologies Court Case Management Plus use of Aquaforest TIFF Server te003.aspx and te004.aspx allows authentication bypass
MEDIUM (5.3)
Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate directories using the tiffserver/te003.aspx or te004.aspx 'ifolder' parameter. This behavior is related to the use of a deprecated version of Aquaforest TIFF Server, possibly 2.x. The vulnerable Aquaforest TIFF Server feature was removed on or around 2023-11-01. Insecure configuration issues in Aquaforest TIFF Server are identified separately as CVE-2023-6352. CVE-2023-6343 is related to or partially caused by CVE-2023-6352.
Published: 2023-11-30T17:48:42.195Z
Updated: 2025-06-03T02:30:17.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6343 vulnerable 2026-06-08 06:19:46.992189 Tyler Technologies Court Case Management Plus use of Aquaforest TIFF Server tssp.aspx allows authentication bypass
MEDIUM (5.3)
Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate and access sensitive files using the tiffserver/tssp.aspx 'FN' and 'PN' parameters. This behavior is related to the use of a deprecated version of Aquaforest TIFF Server, possibly 2.x. The vulnerable Aquaforest TIFF Server feature was removed on or around 2023-11-01. Insecure configuration issues in Aquaforest TIFF Server are identified separately as CVE-2023-6352. CVE-2023-6343 is similar to CVE-2020-9323. CVE-2023-6343 is related to or partially caused by CVE-2023-6352.
Published: 2023-11-30T17:47:54.613Z
Updated: 2025-08-25T19:55:29.460Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6342 vulnerable 2026-06-08 06:19:46.990861 Tyler Technologies Court Case Management Plus "pay for print" allows authentication bypass
MEDIUM (5.3)
Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprint_CM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature was removed on or around 2023-11-01.
Published: 2023-11-30T17:41:13.229Z
Updated: 2024-10-15T17:41:05.798Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.