Approved changes feed: RSS · Atom
cpe:2.3:a:gss:vitalsesp:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gss (1471f81f-c4dd-5fa4-8486-297b7765b257) |
|---|---|
| Product | Vitalsesp (bf6bf38a-ea31-5358-b836-3363cb96f937) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4640 |
vulnerable | 2026-06-08 08:05:13.635439 |
Galaxy Software Services｜Vitals ESP - Missing Authentication
HIGH (7.5)
Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to obtain sensitive information.
Published: 2026-03-24T04:20:47.070Z
Updated: 2026-03-24T14:32:28.738Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4639 |
vulnerable | 2026-06-08 08:05:13.634849 |
Galaxy Software Services｜Vitals ESP - Incorrect Authorization
HIGH (8.8)
Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges.
Published: 2026-03-24T04:17:21.809Z
Updated: 2026-03-24T14:35:48.182Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14255 |
vulnerable | 2026-06-08 07:06:34.156076 |
Galaxy Software Services｜Vitals ESP - SQL Injection
MEDIUM (6.5)
Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
Published: 2025-12-08T07:43:22.584Z
Updated: 2025-12-08T18:53:24.822Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14254 |
vulnerable | 2026-06-08 07:06:34.155572 |
Galaxy Software Services｜Vitals ESP - SQL Injection
MEDIUM (6.5)
Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
Published: 2025-12-08T07:41:01.379Z
Updated: 2025-12-08T14:46:02.412Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14253 |
vulnerable | 2026-06-08 07:06:34.154931 |
Galaxy Software Services｜Vitals ESP - Arbitrary File Read
MEDIUM (4.9)
Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traversal to download arbitrary system files.
Published: 2025-12-08T07:38:09.479Z
Updated: 2025-12-08T14:14:28.725Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.