Approved changes feed: RSS · Atom

cpe:2.3:a:microsens:nmp_web+:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosens (0b51c8b9-d030-54f8-93c8-1c0a7ba8684b)
ProductNmp Web+ (c86be5e5-fe67-511f-ae39-af0ca1cb47b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49153 vulnerable 2026-06-08 07:29:12.641907 Path Traversal in MICROSENS NMP Web+
The affected products could allow an unauthenticated attacker to overwrite files and execute arbitrary code.
Published: 2025-06-25T16:36:11.596Z
Updated: 2025-07-17T13:46:29.428Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49152 vulnerable 2026-06-08 07:29:12.641532 Insufficient Session Expiration in MICROSENS NMP Web+
The affected products contain JSON Web Tokens (JWT) that do not expire, which could allow an attacker to gain access to the system.
Published: 2025-06-25T16:34:00.772Z
Updated: 2025-07-17T13:44:34.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49151 vulnerable 2026-06-08 07:29:12.640950 Use of Hard-coded, Security-relevant Constants in MICROSENS NMP Web+
The affected products could allow an unauthenticated attacker to generate forged JSON Web Tokens (JWT) to bypass authentication.
Published: 2025-06-25T16:32:30.492Z
Updated: 2025-07-17T13:43:28.516Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.