Approved changes feed: RSS · Atom

cpe:2.3:a:apryse:webviewer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApryse (b241ddd9-9f2b-5333-8eb2-2e074d66ce0b)
ProductWebviewer (1fe29b93-62db-5758-b978-c683725b8b17)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-57240 vulnerable 2026-06-08 06:56:13.444509 Details available
A Cross-Site Scripting (XSS) vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allows attackers to execute arbitrary code via a crafted PDF file.
Published: 2025-03-03T00:00:00.000Z
Updated: 2025-03-04T16:19:17.227Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4327 vulnerable 2026-06-08 06:50:17.516456 Apryse WebViewer PDF Document cross site scripting
LOW (3.5)
A vulnerability was found in Apryse WebViewer up to 10.8.0. It has been classified as problematic. This affects an unknown part of the component PDF Document Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 10.9 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-262419. NOTE: The vendor was contacted early about this disclosure and explains that the documentation recommends a strict Content Security Policy and the issue was fixed in release 10.9.
Published: 2024-04-30T01:00:06.720Z
Updated: 2024-08-15T15:40:59.672Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.