Approved changes feed: RSS · Atom

cpe:2.3:a:ruvar:ruvarOA:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorRuvar (e9812947-2d31-5a84-b95f-3e4646f098e8)
ProductRuvaroa (5a1d3d4b-fafe-510b-a564-deee24b8f388)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25533 vulnerable 2026-06-08 06:31:23.026914 Details available
Error messages in RuvarOA v6.01 and v12.01 were discovered to leak the physical path of the website (/WorkFlow/OfficeFileUpdate.aspx). This vulnerability can allow attackers to write files to the server or execute arbitrary commands via crafted SQL statements.
Published: 2024-05-08T00:00:00.000Z
Updated: 2024-08-01T23:44:09.664Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25532 vulnerable 2026-06-08 06:31:23.020056 Details available
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the bt_id parameter at /include/get_dict.aspx.
Published: 2024-05-08T00:00:00.000Z
Updated: 2024-08-01T23:44:09.656Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25531 vulnerable 2026-06-08 06:31:23.019463 Details available
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/SearchCondiction.aspx.
Published: 2024-05-08T00:00:00.000Z
Updated: 2024-08-01T23:44:09.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25530 vulnerable 2026-06-08 06:31:23.018816 Details available
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at /WebUtility/get_find_condiction.aspx.
Published: 2024-05-08T00:00:00.000Z
Updated: 2024-08-01T23:44:09.661Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25527 vulnerable 2026-06-08 06:31:23.017274 Details available
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /PersonalAffair/worklog_template_show.aspx.
Published: 2024-05-08T00:00:00.000Z
Updated: 2025-03-13T18:35:14.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25526 vulnerable 2026-06-08 06:31:23.016690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25525 vulnerable 2026-06-08 06:31:23.015828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25524 vulnerable 2026-06-08 06:31:23.015236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25523 vulnerable 2026-06-08 06:31:23.014659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25522 vulnerable 2026-06-08 06:31:23.013993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25521 vulnerable 2026-06-08 06:31:23.013428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25520 vulnerable 2026-06-08 06:31:23.012695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25518 vulnerable 2026-06-08 06:31:23.011533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25515 vulnerable 2026-06-08 06:31:23.010076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25514 vulnerable 2026-06-08 06:31:23.009144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25511 vulnerable 2026-06-08 06:31:23.007766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25509 vulnerable 2026-06-08 06:31:23.006697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25507 vulnerable 2026-06-08 06:31:23.001964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.