Approved changes feed: RSS · Atom

cpe:2.3:a:quiter:quiter_gateway_(java_war_on_apache_tomcat):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQuiter (00601f48-3203-599f-a4a6-87478732667a)
ProductQuiter Gateway (Java War On Apache Tomcat) (aefbf0cf-5f12-5941-b3de-48e195018e88)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40721 vulnerable 2026-06-08 07:25:05.415051 Reflected Cross-site Scripting (XSS) vulnerability in Quiter Gateway
Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_factura parameter in /<Client>FacturaE/listado_facturas_ficha.jsp.
Published: 2025-07-08T11:43:24.662Z
Updated: 2025-07-10T10:14:39.292Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40720 vulnerable 2026-06-08 07:25:05.414568 Reflected Cross-site Scripting (XSS) vulnerability in Quiter Gateway
Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the campo parameter in /<Client>FacturaE/VerFacturaPDF.
Published: 2025-07-08T11:43:06.231Z
Updated: 2025-07-10T10:14:29.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40719 vulnerable 2026-06-08 07:25:05.414027 Reflected Cross-site Scripting (XSS) vulnerability in Quiter Gateway
Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF.
Published: 2025-07-08T11:42:48.980Z
Updated: 2025-07-10T10:14:17.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40718 vulnerable 2026-06-08 07:25:05.413578 Improper error handling vulnerability in Quiter Gateway
Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads to generate error messages containing sensitive information.
Published: 2025-07-08T11:41:04.457Z
Updated: 2025-07-10T10:14:05.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40717 vulnerable 2026-06-08 07:25:05.413125 SQL injection vulnerability in Quiter Gateway
SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pagina.filter.categoria mensaje in /QuiterGatewayWeb/api/v1/sucesospagina.
Published: 2025-07-08T11:37:27.940Z
Updated: 2025-07-10T10:13:50.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40716 vulnerable 2026-06-08 07:25:05.412640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40715 vulnerable 2026-06-08 07:25:05.412287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40714 vulnerable 2026-06-08 07:25:05.411811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40713 vulnerable 2026-06-08 07:25:05.411359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40712 vulnerable 2026-06-08 07:25:05.410838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40711 vulnerable 2026-06-08 07:25:05.408919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.