Approved changes feed: RSS · Atom

cpe:2.3:a:hanwang:e-face_general_management_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHanwang (29236389-455f-55b5-bac8-2cafa87b4489)
ProductE Face General Management Platform (443b75eb-8e2b-51d2-b117-c1e0d9daa8c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-14737 vulnerable 2026-07-29 00:26:17.513586 Hanwang e-Face General Management Platform querySysAuthStr.do sql injection
HIGH (7.3)
A vulnerability was identified in Hanwang e-Face General Management Platform 6.3.5.4. This impacts an unknown function of the file /sysAuthStr/querySysAuthStr.do. The manipulation of the argument order leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Published: 2026-07-05T10:00:36.457Z
Updated: 2026-07-06T13:07:09.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13547 vulnerable 2026-07-29 00:23:33.169996 Hanwang e-Face General Management Platform upload.do unrestricted upload
HIGH (7.3)
A vulnerability was determined in Hanwang e-Face General Management Platform 6.3.5.4. This issue affects some unknown processing of the file /manage/resourceUpload/upload.do. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-06-29T07:30:45.990Z
Updated: 2026-06-29T12:54:33.875Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.