Approved changes feed: RSS · Atom
cpe:2.3:a:t-systems:buroweb:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | T Systems (ff5b2840-b6c7-54f3-ad9c-f84d1e8d9882) |
|---|---|
| Product | Buroweb (e0b27006-59d3-5317-985b-05b50d6c0a11) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7185 |
vulnerable | 2026-07-29 01:09:04.256099 |
Unauthorized access to files in T-Systems products
A validation vulnerability has been identified in certain web features related to file management or upload in several products of the TAO 2.0 suite. This vulnerability could allow an attacker capable of interacting with the affected feature to attempt to access file system resources outside the scope intended by the application.
Published: 2026-07-06T13:10:09.389Z
Updated: 2026-07-06T16:12:10.409Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1432 |
vulnerable | 2026-06-08 07:49:08.555981 |
SQL injection (SQLi) on the Buroweb platform
SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vulnerability is present in several parameters that do not correctly sanitize user input in the endpoint '/sta/CarpetaPublic/doEvent?APP_CODE=STA&PAGE_CODE=TABLON'. Exploiting this vulnerability could allow an attacker to execute queries on the database and gain access to confidential information.
Published: 2026-02-03T11:14:37.406Z
Updated: 2026-02-03T15:28:52.317Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.