Approved changes feed: RSS · Atom

cpe:2.3:a:bridgetech:vbc_server:6.5.0-10:*:*:*:*:*:*:*

part: a version: 6.5.0-10 update: *

VendorBridgetech (b74c33ff-b0dd-5d2c-ad3d-0ecabb03d836)
ProductVbc Server (bd25ada7-e948-5d19-95ef-77454582df5b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-63214 vulnerable 2026-06-03 15:09:36.343028 Details available
An issue was discovered in bridgetech VBC Server & Element Manager, firmware version 6.5.0-10 , 6.5.0-9, allowing unauthorized attackers to delete and create arbitrary accounts.
Published: 2025-11-19T00:00:00.000Z
Updated: 2025-11-20T21:11:14.383Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63211 vulnerable 2026-06-03 15:09:36.312144 Details available
Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint.
Published: 2025-11-19T00:00:00.000Z
Updated: 2025-11-21T15:53:30.975Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.