Approved changes feed: RSS · Atom

cpe:2.3:a:wolterskluwer:a3factura:4.111.2:rev.1:*:*:*:*:*:*

part: a version: 4.111.2 update: rev.1

VendorWolterskluwer (fbf49b52-d97a-5b31-a7cd-3d9a77a8ea71)
ProductA3Factura (8008c46e-85ad-5ce5-8398-4c3a533545ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2680 vulnerable 2026-06-08 07:55:17.377352 Multiple vulnerabilities in A3factura software
Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerVATNumber', in 'a3factura-app.wolterskluwer.es/#/incomes/salesDeliveryNotes' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser.
Published: 2026-02-26T12:18:48.247Z
Updated: 2026-02-26T14:04:31.184Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2679 vulnerable 2026-06-08 07:55:17.376794 Multiple vulnerabilities in A3factura software
Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'customerName', in 'a3factura-app.wolterskluwer.es/#/incomes/salesInvoices' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser.
Published: 2026-02-26T12:18:13.402Z
Updated: 2026-02-26T14:06:26.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2678 vulnerable 2026-06-08 07:55:17.376146 Multiple vulnerabilities in A3factura software
Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/customers' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser.
Published: 2026-02-26T12:17:17.445Z
Updated: 2026-02-26T14:09:15.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2677 vulnerable 2026-06-08 07:55:17.375551 Multiple vulnerabilities in A3factura software
Reflected Cross-Site Scripting (XSS) on the A3factura web platform, in parameter 'name', in 'a3factura-app.wolterskluwer.es/#/incomes/representatives-management' endpoint, which could allow an attacker to execute arbitrary code in the victim's browser.
Published: 2026-02-26T12:16:03.068Z
Updated: 2026-02-26T14:13:41.794Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.