Therefore Online And Therefore On Premises
Approved changes feed: RSS · Atom
cpe:2.3:a:therefore_corporation_gmbh:therefore_online_and_therefore_on-premises:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Therefore Corporation Gmbh (90eb1b6e-ce80-5402-a892-61857f89a579) |
|---|---|
| Product | Therefore Online And Therefore On Premises (84d0aa77-1d62-5606-8763-230c490bcf0e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-11843 |
vulnerable | 2026-06-08 07:04:29.064946 |
Therefore™ Online and Therefore™ On-Premises contains an account impersonation issue, which could potentially allow the attacker to access all the stored data
Therefore Corporation GmbH has recently become aware that Therefore™ Online and Therefore™ On-Premises contain an account impersonation vulnerability. A malicious user may potentially be able to impersonate the web service account or the account of a service using the API when connecting to the Therefore™ Server. If the malicious user gains this impersonation user access, then it is possible for them to access the documents stored in Therefore™. This impersonation is at application level (Therefore access level), not the operating system level.
Published: 2025-10-31T09:43:08.597Z
Updated: 2025-10-31T18:52:36.823Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.