Battelle V2I Hub 2.5.1
Approved changes feed: RSS · Atom
cpe:2.3:a:battelle:v2i_hub:2.5.1:*:*:*:*:*:*:*part: a version: 2.5.1 update: *
| Vendor | Battelle (db8c3aee-f056-5aa5-8f2c-72c1a6e121c0) |
|---|---|
| Product | V2I Hub (17a8e9a2-73e8-5e97-a8d7-289eb85bc7c4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/matrixmanatyrservice/v2i-unofficial |
purl2cpe | 2026-06-01 10:17:56.661979 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1000630 |
vulnerable | 2026-06-08 05:10:25.857171 |
Details available
Battelle V2I Hub 2.5.1 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to /api/PluginStatusActions.php and /status/pluginStatus.php using the jtSorting or id parameter, which could allow the attacker to view, add, modify or delete information in the back-end database.
Published: 2018-12-28T14:00:00.000Z
Updated: 2024-08-05T12:40:47.671Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000629 |
vulnerable | 2026-06-08 05:10:25.856901 |
Details available
Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by api/SystemConfigActions.php?action=add and the index.php script. A remote attacker could exploit this vulnerability using the parameterName or _login_username parameter in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Published: 2018-12-28T14:00:00.000Z
Updated: 2024-08-05T12:40:47.587Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000628 |
vulnerable | 2026-06-08 05:10:25.856632 |
Details available
Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP's GET global variable array using PHP's strcmp() function. By adding "[]" to the end of "key" in the URL when accessing API functions, an attacker could exploit this vulnerability to execute API functions.
Published: 2018-12-28T14:00:00.000Z
Updated: 2024-08-05T12:40:47.606Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000627 |
vulnerable | 2026-06-08 05:10:25.856355 |
Details available
Battelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict access to the API key file. An attacker could exploit this vulnerability to obtain the current API key to gain unauthorized access to the system.
Published: 2018-12-28T14:00:00.000Z
Updated: 2024-08-05T12:40:47.521Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000626 |
vulnerable | 2026-06-08 05:10:25.856059 |
Details available
Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the lack of requirement to change the default API key. An attacker could exploit this vulnerability using all available API functions containing an unchanged API key to gain unauthorized access to the system.
Published: 2018-12-28T14:00:00.000Z
Updated: 2024-08-05T12:40:47.595Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000625 |
vulnerable | 2026-06-08 05:10:25.855759 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000624 |
vulnerable | 2026-06-08 05:10:25.855370 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.