Approved changes feed: RSS · Atom
cpe:2.3:h:zspace:z4pro\+:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Zspace (2ac5b556-031c-5aa0-8f16-c9469a2068d5) |
|---|---|
| Product | Z4Pro+ (ed6bbf7b-d4c2-52fa-8707-b47ff4d8fdda) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-15133 |
not_vulnerable | 2026-06-08 07:06:35.753197 |
ZSPACE Z4Pro+ HTTP POST Request close zfilev2_api_CloseSafe command injection
MEDIUM (6.3)
A vulnerability was identified in ZSPACE Z4Pro+ 1.0.0440024. The impacted element is the function zfilev2_api_CloseSafe of the file /v2/file/safe/close of the component HTTP POST Request Handler. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
Published: 2025-12-28T11:02:10.256Z
Updated: 2025-12-29T18:00:13.048Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15132 |
not_vulnerable | 2026-06-08 07:06:35.751011 |
ZSPACE Z4Pro+ HTTP POST Request open zfilev2_api_open command injection
MEDIUM (6.3)
A vulnerability was determined in ZSPACE Z4Pro+ 1.0.0440024. The affected element is the function zfilev2_api_open of the file /v2/file/safe/open of the component HTTP POST Request Handler. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
Published: 2025-12-28T10:32:05.208Z
Updated: 2025-12-29T18:00:46.951Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15131 |
not_vulnerable | 2026-06-08 07:06:35.750306 |
ZSPACE Z4Pro+ HTTP POST Request status zfilev2_api_SafeStatus command injection
MEDIUM (6.3)
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2_api_SafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
Published: 2025-12-28T10:02:06.337Z
Updated: 2025-12-29T18:01:13.797Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.