Approved changes feed: RSS · Atom

cpe:2.3:a:esoft:planner:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEsoft (1a63463e-c6f3-5bdb-828f-793009c89e73)
ProductPlanner (fd7ed223-f2d6-5c76-a185-21dfa3ca5338)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-48536 vulnerable 2026-06-08 06:50:09.587720 Details available
Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by the company via supplying a crafted web request.
Published: 2024-11-20T00:00:00.000Z
Updated: 2024-12-03T15:37:22.236Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48533 vulnerable 2026-06-08 06:50:09.585936 Details available
A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSoft Planner 3.24.08271-USA allows attackers to enumerate valid user e-mail accounts.
Published: 2024-11-20T00:00:00.000Z
Updated: 2024-12-03T15:41:41.223Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48530 vulnerable 2026-06-08 06:50:09.571006 Details available
An issue in the Instructor Appointment Availability module of eSoft Planner 3.24.08271-USA allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
Published: 2024-11-20T00:00:00.000Z
Updated: 2024-12-03T15:53:33.880Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.