Approved changes feed: RSS · Atom

cpe:2.3:a:ordat:foss-online:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOrdat (1ec3a253-0925-5491-b551-025257780a17)
ProductFoss Online (2a6c5120-d36a-562e-8ed8-abb78fa6fb3a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-34336 vulnerable 2026-06-08 06:37:33.130689 Details available
User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality.
Published: 2024-09-12T00:00:00.000Z
Updated: 2026-07-05T16:04:00.787Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34335 vulnerable 2026-06-08 06:37:33.130262 Details available
ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page.
Published: 2024-09-12T00:00:00.000Z
Updated: 2026-07-05T16:03:56.872Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34334 vulnerable 2026-06-08 06:37:33.128580 Details available
ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function.
Published: 2024-09-12T00:00:00.000Z
Updated: 2026-07-05T16:03:52.487Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.