GCVE - cpe:2.3:a:zwickroell_gmbh_&_co._kg:test_data

Approved changes feed: RSS · Atom

cpe:2.3:a:zwickroell_gmbh_&_co._kg:test_data_management:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Zwickroell Gmbh & Co. Kg (`78a0b4ac-7e12-5dca-844c-122c94b2ed49`)
Product	Test Data Management (`cedb6b56-3dcc-57b2-b3ce-db6e6e387e50`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-29522`	vulnerable	2026-06-08 07:55:16.249492	ZwickRoell Test Data Management < 3.0.8 Path Traversal LFI ZwickRoell Test Data Management versions prior to 3.0.8 contain a local file inclusion (LFI) vulnerability in the /server/node_upgrade_srv.js endpoint. An unauthenticated attacker can supply directory traversal sequences via the firmware parameter to access arbitrary files on the server, leading to information disclosure of sensitive system files. Published: 2026-03-16T20:46:49.771Z Updated: 2026-03-17T13:36:22.871Z Open on db.gcve.eu Reference links https://www.zwickroell.com/accessories/testxpert-testing-software/test-data-management/ https://www.vulncheck.com/advisories/zwickroell-test-data-management-path-traversal-lfi	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.