Approved changes feed: RSS · Atom

cpe:2.3:a:anviz:anviz_crosschex_standard:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAnviz (b6cad703-cbb1-5fd5-9c9d-8ffc4d1d6388)
ProductAnviz Crosschex Standard (81ddf790-fe0c-50d2-8d3f-8bb2c327fdda)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40434 vulnerable 2026-06-03 15:23:34.747274 Anviz CrossChex Standard Improper Verification of Source of a Communication Channel
HIGH (8.1)
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic.
Published: 2026-04-17T19:49:28.099Z
Updated: 2026-04-17T20:28:02.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32650 vulnerable 2026-06-03 15:20:43.417921 Anviz CrossChex Standard Algorithm Downgrade
HIGH (7.5)
Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials to be sent in plaintext and enabling unauthorized database access.
Published: 2026-04-17T19:52:45.308Z
Updated: 2026-04-17T20:26:17.922Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.