Approved changes feed: RSS · Atom

cpe:2.3:a:unicomsi:focal_point:7.6.1:*:*:*:*:*:*:*

part: a version: 7.6.1 update: *

VendorUnicomsi (46e99605-0a8f-5fbd-9368-51e155408af0)
ProductFocal Point (b730d15a-d131-5178-8dd3-084818633aa2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-43925 vulnerable 2026-06-08 07:25:10.478493 Details available
An issue was discovered in Unicom Focal Point 7.6.1. The database is encrypted with a hardcoded key, making it easier to recover the cleartext data.
Published: 2025-06-03T00:00:00.000Z
Updated: 2025-06-03T18:23:56.006Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43924 vulnerable 2026-06-08 07:25:10.478208 Details available
Cross Site Scripting vulnerability was discovered in Unicom Focal Point 7.6.1. The val parameter in SettingController (for /fp/admin/settings/loginpage) and the rootserviceurl parameter in FriendsController (for /fp/admin/settings/friends), entered by an admin, allow stored XSS.
Published: 2025-06-03T00:00:00.000Z
Updated: 2025-06-04T20:22:22.981Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43923 vulnerable 2026-06-08 07:25:10.477749 Details available
An issue was discovered in ReportController in Unicom Focal Point 7.6.1. A user who has administrative privilege in Focal Point can perform SQL injection via the image parameter during a delete report image operation.
Published: 2025-06-03T00:00:00.000Z
Updated: 2025-06-04T20:20:26.634Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.