Approved changes feed: RSS · Atom

cpe:2.3:a:nec_corporation:univerge_ix:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNec Corporation (7500c9f3-5987-5e67-86a5-f4aac44229cc)
ProductUniverge Ix (d48f7fb8-8031-5159-8b57-beae1e52d7e4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8153 vulnerable 2026-06-08 07:45:19.710672 Details available
Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to Ver.10.10.31, Ver.10.11.6 and UNIVERGE IX-R/IX-V Ver1.3.16, Ver1.3.21 allows a attacker to inject an arbitrary scripts may be executed on the user's browser.
Published: 2025-09-17T02:10:09.645Z
Updated: 2025-09-17T13:45:14.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11014 vulnerable 2026-06-08 06:23:48.427179 Details available
MEDIUM (4.3)
Cross-site request forgery (CSRF) vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27 and for Ver10.9 up to Ver10.9.14 allows a attacker to hijack the authentication of screens on the device via the management interface.
Published: 2024-11-29T08:06:19.712Z
Updated: 2025-07-24T14:37:20.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11013 vulnerable 2026-06-08 06:23:48.425852 Details available
HIGH (7.2)
Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to Ver10.9.14 and UNIVERGE IX-R/IX-V Ver1.2.15 and earlier allows a attacker to inject an arbitrary CLI commands to be executed on the device via the management interface.
Published: 2024-11-29T08:03:07.458Z
Updated: 2025-07-24T14:40:37.401Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.