Approved changes feed: RSS · Atom

cpe:2.3:a:sohu:cachecloud:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSohu (0c9bd43b-9506-5cef-982a-6fd21ff27440)
ProductCachecloud (09917dc4-9213-5d75-8411-233c26c03886)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15221 vulnerable 2026-06-08 07:06:35.896860 SohuTV CacheCloud AppDataMigrateController.java index cross site scripting
LOW (3.5)
A flaw has been found in SohuTV CacheCloud up to 3.2.0. This vulnerability affects the function index of the file src/main/java/com/sohu/cache/web/controller/AppDataMigrateController.java. This manipulation causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2025-12-30T05:02:05.317Z
Updated: 2025-12-30T15:08:29.719Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15220 vulnerable 2026-06-08 07:06:35.896533 SohuTV CacheCloud LoginController.java init cross site scripting
MEDIUM (4.3)
A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. This affects the function init of the file src/main/java/com/sohu/cache/web/controller/LoginController.java. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2025-12-30T04:32:07.020Z
Updated: 2025-12-30T15:23:53.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15219 vulnerable 2026-06-08 07:06:35.896193 SohuTV CacheCloud MachineManageController.java doPodList cross site scripting
LOW (3.5)
A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doMachineList/doPodList of the file src/main/java/com/sohu/cache/web/controller/MachineManageController.java. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2025-12-30T04:02:07.018Z
Updated: 2025-12-30T15:37:03.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15204 vulnerable 2026-06-08 07:06:35.875674 SohuTV CacheCloud QuartzManageController.java doQuartzList cross site scripting
LOW (2.4)
A vulnerability was determined in SohuTV CacheCloud up to 3.2.0. Affected is the function doQuartzList of the file src/main/java/com/sohu/cache/web/controller/QuartzManageController.java. Executing manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2025-12-29T20:32:06.147Z
Updated: 2025-12-30T15:58:09.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15203 vulnerable 2026-06-08 07:06:35.875105 SohuTV CacheCloud ResourceController.java index cross site scripting
LOW (2.4)
A vulnerability was found in SohuTV CacheCloud up to 3.2.0. This impacts the function index of the file src/main/java/com/sohu/cache/web/controller/ResourceController.java. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2025-12-29T20:02:06.187Z
Updated: 2025-12-30T15:58:16.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15202 vulnerable 2026-06-08 07:06:35.874687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15201 vulnerable 2026-06-08 07:06:35.874145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15200 vulnerable 2026-06-08 07:06:35.873581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15175 vulnerable 2026-06-08 07:06:35.831835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15174 vulnerable 2026-06-08 07:06:35.831468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15173 vulnerable 2026-06-08 07:06:35.831020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15172 vulnerable 2026-06-08 07:06:35.830409 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15171 vulnerable 2026-06-08 07:06:35.829988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15146 vulnerable 2026-06-08 07:06:35.780340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15145 vulnerable 2026-06-08 07:06:35.779344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.