Approved changes feed: RSS · Atom

cpe:2.3:a:sohutv:cachecloud:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSohutv (d6b3c7af-464a-5b9a-89b0-a82c8be281b3)
ProductCachecloud (1e0773d5-29c2-572f-90a6-2b4f5d9db86b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15221 vulnerable 2026-06-08 07:06:35.896829 SohuTV CacheCloud AppDataMigrateController.java index cross site scripting
LOW (3.5)
A flaw has been found in SohuTV CacheCloud up to 3.2.0. This vulnerability affects the function index of the file src/main/java/com/sohu/cache/web/controller/AppDataMigrateController.java. This manipulation causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2025-12-30T05:02:05.317Z
Updated: 2025-12-30T15:08:29.719Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15220 vulnerable 2026-06-08 07:06:35.896498 SohuTV CacheCloud LoginController.java init cross site scripting
MEDIUM (4.3)
A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This affects the function init of the file src/main/java/com/sohu/cache/web/controller/LoginController.java. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2025-12-30T04:32:07.020Z
Updated: 2025-12-30T15:23:53.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15219 vulnerable 2026-06-08 07:06:35.896160 SohuTV CacheCloud MachineManageController.java doPodList cross site scripting
LOW (3.5)
A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doMachineList/doPodList of the file src/main/java/com/sohu/cache/web/controller/MachineManageController.java. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2025-12-30T04:02:07.018Z
Updated: 2025-12-30T15:37:03.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15204 vulnerable 2026-06-08 07:06:35.875623 SohuTV CacheCloud QuartzManageController.java doQuartzList cross site scripting
LOW (2.4)
A vulnerability was determined in SohuTV CacheCloud up to 3.2.0. Affected is the function doQuartzList of the file src/main/java/com/sohu/cache/web/controller/QuartzManageController.java. Executing manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2025-12-29T20:32:06.147Z
Updated: 2025-12-30T15:58:09.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15203 vulnerable 2026-06-08 07:06:35.875067 SohuTV CacheCloud ResourceController.java index cross site scripting
LOW (2.4)
A vulnerability was found in SohuTV CacheCloud up to 3.2.0. This impacts the function index of the file src/main/java/com/sohu/cache/web/controller/ResourceController.java. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2025-12-29T20:02:06.187Z
Updated: 2025-12-30T15:58:16.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15202 vulnerable 2026-06-08 07:06:35.874541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15201 vulnerable 2026-06-08 07:06:35.874102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15200 vulnerable 2026-06-08 07:06:35.873536 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15175 vulnerable 2026-06-08 07:06:35.831805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15174 vulnerable 2026-06-08 07:06:35.831352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15173 vulnerable 2026-06-08 07:06:35.830874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15172 vulnerable 2026-06-08 07:06:35.830368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15171 vulnerable 2026-06-08 07:06:35.829941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15146 vulnerable 2026-06-08 07:06:35.780146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15145 vulnerable 2026-06-08 07:06:35.778456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.