Approved changes feed: RSS · Atom
cpe:2.3:a:apex_softcell:ld_geo:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apex Softcell (93e50d75-9a65-515b-b54f-5dea40d77cff) |
|---|---|
| Product | Ld Geo (6b1ca8f1-9d8e-5895-a284-1f76b0aafd4a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-47089 |
vulnerable | 2026-06-08 06:48:11.273818 |
Unauthorized Transaction Manipulation Vulnerability
This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating the transaction token ID in the API request leading to unauthorized access and modification of transactions belonging to other users.
Published: 2024-09-19T06:18:33.392Z
Updated: 2024-09-19T13:45:30.139Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47088 |
vulnerable | 2026-06-08 06:48:11.273194 |
User Enumeration vulnerability
This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on login OTP, which could lead to gain unauthorized access to other user accounts.
Published: 2024-09-19T06:13:40.801Z
Updated: 2024-09-19T13:47:33.613Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47087 |
vulnerable | 2026-06-08 06:48:11.272473 |
Information Disclosure Vulnerability
This vulnerability exists in Apex Softcell LD Geo due to improper validation of the certain parameters (Client ID, DPID or BOID) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users.
Published: 2024-09-19T06:08:46.528Z
Updated: 2024-09-19T13:49:16.221Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.