Approved changes feed: RSS · Atom
cpe:2.3:a:ebm_technologies:risweb:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ebm Technologies (75befe97-ed83-5e36-ba95-6f29f7bb961d) |
|---|---|
| Product | Risweb (2fbdeac1-e5b1-5d85-89e8-7d52cd5bfe13) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-26264 |
vulnerable | 2026-06-08 06:31:25.990176 |
EBM Technologies RISWEB - SQL Injection
CRITICAL (9.8)
EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page is accessible without login. This allows remote attackers to inject SQL commands without authentication, enabling them to read, modify, and delete database records.
Published: 2024-02-15T03:02:37.196Z
Updated: 2024-08-06T15:34:02.507Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26263 |
vulnerable | 2026-06-08 06:31:25.988913 |
EBM Technologies RISWEB - Improper Access Control
MEDIUM (5.3)
EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login.
Published: 2024-02-15T02:56:03.757Z
Updated: 2024-10-14T06:13:18.118Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.