GCVE - cpe:2.3:a:talya_informatics:elektraweb:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:talya_informatics:elektraweb:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Talya Informatics (`ed2625dc-0788-55a7-81d0-2b947dc14ce8`)
Product	Elektraweb (`e2649114-e9ae-5ef3-a9eb-623828cd6fcd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-0949`	vulnerable	2026-06-08 06:22:03.198368	Improper Access Control in Talya Informatics' Elektraweb CRITICAL (9.8) Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68. Published: 2024-06-27T09:36:59.897Z Updated: 2026-06-03T14:33:56.768Z Open on db.gcve.eu Reference links https://www.usom.gov.tr/bildirim/tr-24-0808 https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0808	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-0947`	vulnerable	2026-06-08 06:22:03.192935	Cookies Manipulation in Talya Informatics' Elektraweb CRITICAL (9.8) Reliance on Cookies without Validation and Integrity Checking vulnerability in Talya Informatics Elektraweb allows Session Credential Falsification through Manipulation, Accessing/Intercepting/Modifying HTTP Cookies, Manipulating Opaque Client-based Data Tokens. This issue affects Elektraweb: before v17.0.68. Published: 2024-06-27T09:27:41.220Z Updated: 2026-06-03T14:37:35.186Z Open on db.gcve.eu Reference links https://www.usom.gov.tr/bildirim/tr-24-0808 https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0808	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.