Approved changes feed: RSS · Atom

cpe:2.3:a:wem-project:wem:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWem Project (80751199-52bf-50ac-8f91-148eb64b9de0)
ProductWem (840a874a-ddee-585b-abae-76dcd8dfc1e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22788 vulnerable 2026-06-08 07:51:13.921875 WebErpMesv2 allows unauthenticated API Access
HIGH (8.2)
WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Prior to 1.19, the WebErpMesV2 application exposes multiple sensitive API endpoints without authentication middleware. An unauthenticated remote attacker can read business-critical data including companies, quotes, orders, tasks, and whiteboards. Limited write access allows creation of company records and full manipulation of collaboration whiteboards. This vulnerability is fixed in 1.19.
Published: 2026-01-12T21:40:11.913Z
Updated: 2026-01-13T19:08:34.529Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.