GCVE - cpe:2.3:a:sfm_software_technologies_inc.:costifier:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sfm_software_technologies_inc.:costifier:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sfm Software Technologies Inc. (`cad15eba-9a71-5b72-8a8d-6fce02b46ab7`)
Product	Costifier (`cd2b7c21-e215-5d10-b9f4-55824ae58df9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-15575`	vulnerable	2026-11-03 10:16:20.126677	Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier MEDIUM (5.3) Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-10-16T08:45:41.731Z Updated: 2026-10-16T11:21:41.333Z Open on db.gcve.eu Reference links https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1349	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-15219`	vulnerable	2026-11-03 10:16:19.957305	IDOR in SFM Software's Costifier MEDIUM (6.5) Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-10-16T08:42:32.579Z Updated: 2026-10-16T11:22:24.068Z Open on db.gcve.eu Reference links https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1349	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.