Access Commander
Approved changes feed: RSS · Atom
cpe:2.3:a:2n:access_commander:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | 2N (2d6c700f-e11a-57ef-9b72-4459361dd0a3) |
|---|---|
| Product | Access Commander (0943369d-7e86-5a49-97d5-03cb6edcd542) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-59787 |
vulnerable | 2026-06-08 07:35:23.101976 |
HTTP 5XX Internal Server Errors
2N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indicating improper handling of invalid input and potential security or availability impacts.
Published: 2026-03-04T15:31:59.211Z
Updated: 2026-03-05T19:01:31.814Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59786 |
vulnerable | 2026-06-08 07:35:23.101401 |
Cookies are not Invalidated upon Logout and Password Change
2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.
Published: 2026-03-04T15:30:35.148Z
Updated: 2026-03-04T16:03:17.708Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59785 |
vulnerable | 2026-06-08 07:35:23.101048 |
API - Insufficient Input Validation
Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption.
This vulnerability can only be exploited after authenticating with administrator privileges.
Published: 2026-03-04T15:30:31.230Z
Updated: 2026-03-04T16:17:08.636Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59784 |
vulnerable | 2026-06-08 07:35:23.100587 |
Log Pollution - Control Characters Not Escaped
2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation.
This vulnerability can only be exploited after authenticating with administrator privileges.
Published: 2026-03-04T15:26:47.073Z
Updated: 2026-03-04T16:16:44.717Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59783 |
vulnerable | 2026-06-08 07:35:23.100156 |
OS Command Injection over API
API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection.
This vulnerability can only be exploited after authenticating with administrator privileges.
Published: 2026-03-04T15:19:13.116Z
Updated: 2026-03-04T16:15:00.802Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47255 |
vulnerable | 2026-06-08 06:48:11.626719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47254 |
vulnerable | 2026-06-08 06:48:11.626331 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47253 |
vulnerable | 2026-06-08 06:48:11.625192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.