Approved changes feed: RSS · Atom
cpe:2.3:a:kaleris:navis_n4:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Kaleris (5e1740ff-5d7d-5533-a164-797d53131b04) |
|---|---|
| Product | Navis N4 (d1d474c3-1f94-5e61-a436-52f05dc4eff1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-5087 |
vulnerable | 2026-06-08 07:35:24.125674 |
Cleartext Transmission of Sensitive Information in Kaleris Navis N4
Kaleris NAVIS N4 ULC (Ultra Light Client) communicates insecurely using zlib-compressed data over HTTP. An attacker capable of observing network traffic between Ultra Light Clients and N4 servers can extract sensitive information, including plaintext credentials.
Published: 2025-06-24T18:30:40.700Z
Updated: 2025-06-24T18:46:31.376Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2566 |
vulnerable | 2026-06-08 07:16:57.567157 |
Deserialization of Untrusted Data in Kaleris Navis N4
Kaleris NAVIS N4 ULC (Ultra Light Client) contains an unsafe Java deserialization vulnerability. An unauthenticated attacker can make specially crafted requests to execute arbitrary code on the server.
Published: 2025-06-24T18:27:21.479Z
Updated: 2025-06-24T18:47:46.713Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.