Operation And Maintenance Security Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:sangfor:operation_and_maintenance_security_management_system:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sangfor (7183d45f-31d3-5cee-8564-6de22953a0b5) |
|---|---|
| Product | Operation And Maintenance Security Management System (1edf9117-dba5-589c-8bef-821f44cc9cbf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1414 |
vulnerable | 2026-06-08 07:49:08.510359 |
Sangfor Operation and Maintenance Security Management System HTTP POST Request get_Information getInformation command injection
MEDIUM (6.3)
A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This impacts the function getInformation of the file /equipment/get_Information of the component HTTP POST Request Handler. Executing a manipulation of the argument fortEquipmentIp can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-01-26T02:02:06.549Z
Updated: 2026-02-23T08:55:31.161Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1413 |
vulnerable | 2026-06-08 07:49:08.509862 |
Sangfor Operation and Maintenance Security Management System HTTP POST Request port_validate portValidate command injection
MEDIUM (6.3)
A vulnerability was found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This affects the function portValidate of the file /fort/ip_and_port/port_validate of the component HTTP POST Request Handler. Performing a manipulation of the argument port results in command injection. The attack can be initiated remotely. The exploit has been made public and could be used.
Published: 2026-01-26T01:32:06.217Z
Updated: 2026-02-23T08:55:17.522Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1412 |
vulnerable | 2026-06-08 07:49:08.509358 |
Sangfor Operation and Maintenance Security Management System HTTP POST Request get_clip_img command injection
HIGH (7.3)
A vulnerability has been found in Sangfor Operation and Maintenance Security Management System up to 3.0.12. The impacted element is an unknown function of the file /fort/audit/get_clip_img of the component HTTP POST Request Handler. Such manipulation of the argument frame/dirno leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-01-26T01:02:05.990Z
Updated: 2026-02-23T08:55:04.938Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1325 |
vulnerable | 2026-06-08 07:49:08.270219 |
Sangfor Operation and Maintenance Security Management System edit_pwd_mall password recovery
MEDIUM (5.3)
A security flaw has been discovered in Sangfor Operation and Maintenance Security Management System up to 3.0.12. This affects the function edit_pwd_mall of the file /fort/login/edit_pwd_mall. The manipulation of the argument flag results in weak password recovery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-01-22T13:02:11.115Z
Updated: 2026-02-23T08:52:29.862Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1324 |
vulnerable | 2026-06-08 07:49:08.269714 |
Sangfor Operation and Maintenance Management System SSH Protocol session SessionController os command injection
HIGH (8.8)
A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.12. Affected by this issue is the function SessionController of the file /isomp-protocol/protocol/session of the component SSH Protocol Handler. The manipulation of the argument keypassword leads to os command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-01-22T13:02:08.642Z
Updated: 2026-02-23T08:52:16.272Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15503 |
vulnerable | 2026-06-08 07:06:36.318666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15502 |
vulnerable | 2026-06-08 07:06:36.318250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15501 |
vulnerable | 2026-06-08 07:06:36.317737 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12916 |
vulnerable | 2026-06-08 07:04:31.186547 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.