Approved changes feed: RSS · Atom

cpe:2.3:a:avalara:avalara_for_salesforce_cpq:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAvalara (6073aa46-dab6-5be8-b2a9-bf2f00457561)
ProductAvalara For Salesforce Cpq (e72fb632-898c-5b48-ab81-56af50f227dc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38453 vulnerable 2026-06-08 06:41:47.180476 Details available
The Avalara for Salesforce CPQ app before 7.0 for Salesforce allows attackers to read an API key. NOTE: the current version is 11 as of mid-2024.
Published: 2024-07-03T00:00:00.000Z
Updated: 2024-08-02T04:12:25.111Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.