Approved changes feed: RSS · Atom

cpe:2.3:a:oceanicsoft:valeapp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOceanicsoft (2fd8e218-c7ef-58af-b702-9240e0bca405)
ProductValeapp (1e7de940-d729-5299-99c4-7d3be87b5bf5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8644 vulnerable 2026-06-08 07:00:25.314110 Cleartext Storage of Sensitive Information in Oceanic Software's ValeApp
Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking (aka JavaScript Hijacking). This issue affects ValeApp: before v2.0.0.
Published: 2024-09-27T11:48:53.187Z
Updated: 2026-06-02T07:55:40.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8643 vulnerable 2026-06-08 07:00:25.313607 Session Hijacking in Oceanic Software's ValeApp
Session Fixation vulnerability in Oceanic Software ValeApp allows Brute Force, Session Hijacking. This issue affects ValeApp: before v2.0.0.
Published: 2024-09-27T11:53:44.040Z
Updated: 2026-06-02T07:57:01.437Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8609 vulnerable 2026-06-08 07:00:25.240361 Improper Access Control in Oceanic Software's ValeApp
Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Query System for Information. This issue affects ValeApp: before v2.0.0.
Published: 2024-09-27T11:55:52.550Z
Updated: 2026-06-02T07:58:28.664Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8608 vulnerable 2026-06-08 07:00:25.239887 Stored XSS in Oceanic Software's ValeApp
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Oceanic Software ValeApp allows Stored XSS. This issue affects ValeApp: before v2.0.0.
Published: 2024-09-27T12:00:27.699Z
Updated: 2026-06-02T08:00:33.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8607 vulnerable 2026-06-08 07:00:25.238537 SQLi in Oceanic Software's ValeApp
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oceanic Software ValeApp allows SQL Injection. This issue affects ValeApp: before v2.0.0.
Published: 2024-09-27T12:04:40.125Z
Updated: 2026-06-02T08:02:06.185Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.