Approved changes feed: RSS · Atom
cpe:2.3:a:xorux:xormon-ng:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Xorux (b3290ebf-cd31-5a29-8405-7213c4f5456f) |
|---|---|
| Product | Xormon Ng (fba82624-ff95-5fcf-a476-e5aaf462e683) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-54766 |
vulnerable | 2026-06-08 07:33:13.182888 |
KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive Information
An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to export the appliance configuration, exposing sensitive information.
Published: 2025-07-28T23:16:13.316Z
Updated: 2025-11-03T20:06:33.686Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54765 |
vulnerable | 2026-06-08 07:33:13.181762 |
KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to Administrator
An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to import the appliance configuration, allowing an attacker to control the configuration of the appliance, to include granting themselves administrative level permissions.
Published: 2025-07-28T23:25:12.409Z
Updated: 2025-11-03T20:06:32.315Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.