Approved changes feed: RSS · Atom

cpe:2.3:a:vertigis:fm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVertigis (481c2b3d-23c9-51a8-bd4d-156af0478ea0)
ProductFm (fe5359d5-53ba-5f9d-9eb1-a5c9e2a46d1e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3877 vulnerable 2026-06-08 08:01:19.605924 Reflected Cross-Site Scripting in Dashboard Search
A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that if visited by an authenticated victim, will execute arbitrary JavaScript in the victim's context. Such a URL could be delivered through various means, for instance, by sending a link or by tricking victims to visit a page crafted by the attacker.
Published: 2026-04-01T13:12:24.268Z
Updated: 2026-04-01T13:33:40.924Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.