Ai Assist For Customer
Approved changes feed: RSS · Atom
cpe:2.3:a:deloitte:ai_assist_for_customer:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Deloitte (6e6ab564-5306-5e8d-9f37-3dcac9a256bc) |
|---|---|
| Product | Ai Assist For Customer (02b15de1-cd3d-5bf4-9ed0-62bc7eefb915) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57476 |
vulnerable | 2026-07-29 01:00:29.823357 |
Deloitte AI Assist for Customer unauthenticated RAG corpus read and write
MEDIUM (4.8)
Deloitte AI Assist for Customer exposed unauthenticated API endpoints that allowed an attacker with knowledge of additional parameters to read from or inject content into the retrieval-augmented generation (RAG) corpus. On 2026-03-25, AI Assist for Customer restricted network access and enforced authentication for the previously exposed endpoints.
Published: 2026-07-10T17:10:50.682Z
Updated: 2026-08-03T18:20:12.103Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57475 |
vulnerable | 2026-07-29 01:00:29.823126 |
Deloitte AI Assist for Customer unauthenticated configuration write
MEDIUM (5.3)
Deloitte AI Assist for Customer accepted unauthenticated POST requests through public-facing API endpoints that allowed a remote attacker to make limited additions to the configuration. These additions were not used by the system. On 2026-03-25, AI Assist for Customer restricted network access and enforced authentication for the previously exposed endpoints.
Published: 2026-07-10T17:10:35.437Z
Updated: 2026-08-03T18:19:52.994Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57474 |
vulnerable | 2026-07-29 01:00:29.822745 |
Deloitte AI Assist for Customer information disclosure
MEDIUM (5.3)
Deloitte AI Assist for Customer disclosed some configuration information through public-facing API endpoints that accepted unauthenticated requests. This information could reduce an attacker’s reconnaissance effort. On 2026-03-25, AI Assist for Customer restricted network access and enforced authentication for the previously exposed endpoints.
Published: 2026-07-10T17:10:15.585Z
Updated: 2026-07-21T17:06:47.452Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.