Peering Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:peeringmanager:peering-manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Peeringmanager (0e718911-d7f3-5658-add4-eca3d579ffe2) |
|---|---|
| Product | Peering Manager (ebf41b2f-c656-55e0-9968-462d28345415) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-28114 |
vulnerable | 2026-06-08 06:33:26.494532 |
Remote Code Execution using Server Side Template Injection in Peering Manager
HIGH (8.1)
Peering Manager is a BGP session management tool. There is a Server Side Template Injection vulnerability that leads to Remote Code Execution in Peering Manager <=1.8.2. As a result arbitrary commands can be executed on the operating system that is running Peering Manager. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Published: 2024-03-12T19:58:39.859Z
Updated: 2024-08-28T16:23:15.497Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28112 |
vulnerable | 2026-06-08 06:33:26.492341 |
Cross site scripting on router page in Peering Manager
MEDIUM (6.1)
Peering Manager is a BGP session management tool. Affected versions of Peering Manager are subject to a potential stored Cross-Site Scripting (XSS) attack in the `name` attribute of AS or Platform. The XSS triggers on a routers detail page. Adversaries are able to execute arbitrary JavaScript code with the permission of a victim. XSS attacks are often used to steal credentials or login tokens of other users. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Published: 2024-03-12T19:54:16.219Z
Updated: 2024-08-26T14:03:19.025Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.