Anchore Enterprise
Approved changes feed: RSS · Atom
cpe:2.3:a:anchore:anchore_enterprise:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Anchore (8c661697-2119-5958-a5c4-8cd8ec010026) |
|---|---|
| Product | Anchore Enterprise (3e82af7e-9e05-5c54-aa48-0e610df2d258) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-63727 |
vulnerable | 2026-07-29 01:06:19.435975 |
Anchore Enterprise Privilege Escalation via User Management API
HIGH (8.8)
Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user management API. An authenticated attacker who is able to access the Anchore Enterprise API could issue an API call capable of modifying user permissions to gain access to additional resources and operations. It is not possible to grant the system-admin role, but a read only user could be granted write access. This issue is fixed in Anchore Enterprise 5.27.2 and 6.0.1.
Published: 2026-07-28T14:25:35.625Z
Updated: 2026-08-14T16:50:35.603Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25076 |
vulnerable | 2026-06-08 07:53:18.929882 |
Anchore Enterprise GraphQL Reports API SQL injection
HIGH (7.3)
Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API. An authenticated attacker that is able to access the GraphQL API could execute arbitrary SQL instructions resulting in modifications to the data contained in the Anchore Enterprise database.
Published: 2026-03-12T21:07:46.502Z
Updated: 2026-03-13T13:08:47.633Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.