Approved changes feed: RSS · Atom
cpe:2.3:a:changing_information_technology:idexpert:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Changing Information Technology (cff80b03-a9ad-5188-ae44-eaf523eab4dd) |
|---|---|
| Product | Idexpert (dea355de-e476-50e8-8e2e-f427aeff7961) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-10653 |
vulnerable | 2026-06-08 06:23:47.196653 |
CHANGING Information Technology IDExpert - OS Command Injection
HIGH (7.2)
IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on the server.
Published: 2024-11-01T09:59:15.734Z
Updated: 2024-11-04T06:47:22.301Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10652 |
vulnerable | 2026-06-08 06:23:47.194850 |
CHANGING Information Technology IDExpert - Reflected XSS
MEDIUM (6.1)
IDExpert from CHANGING Information Technology does not properly validate a parameter for a specific functionality, allowing unauthenticated remote attackers to inject JavsScript code and perform Reflected Cross-site scripting attacks.
Published: 2024-11-01T09:56:32.011Z
Updated: 2024-11-01T13:31:48.852Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10651 |
vulnerable | 2026-06-08 06:23:47.194332 |
CHANGING Information Technology IDExpert - Arbitrary File Read through Path Traversal
MEDIUM (4.9)
IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrator privileges to exploit this vulnerability to read arbitrary system files.
Published: 2024-11-01T09:53:23.611Z
Updated: 2024-11-01T13:32:30.517Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.