GCVE - cpe:2.3:a:ecava:integraxor:3.6.4000.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ecava:integraxor:3.6.4000.0:*:*:*:*:*:*:*

part: a version: 3.6.4000.0 update: *

Vendor	Ecava (`3108bf0d-ad30-5878-8d1d-1e63e493f424`)
Product	Integraxor (`f201fb3b-b703-5142-81ae-190005d00183`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-0753`	vulnerable	2026-06-08 05:05:14.178637	Ecava IntegraXor Stack-based Buffer Overflow Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service (system crash) by triggering access to DLL code located in the IntegraXor directory. Published: 2014-01-21T01:00:00.000Z Updated: 2025-08-25T23:46:30.088Z Open on db.gcve.eu Reference links http://osvdb.org/102171 http://www.integraxor.com/blog/buffer-overflow-vulnerability-note/ https://www.cisa.gov/news-events/ics-advisories/icsa-14-016-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0752`	vulnerable	2026-06-08 05:05:14.174574	Ecava IntegraXor Exposure of Access Control List Files to an Unauthorized Control Sphere The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted URL. Published: 2014-01-09T11:00:00.000Z Updated: 2025-08-22T22:53:01.252Z Open on db.gcve.eu Reference links http://www.integraxor.com/blog/category/security/vulnerability-note/ https://www.cisa.gov/news-events/ics-advisories/icsa-14-008-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0246`	vulnerable	2026-06-08 05:00:40.240502	Details available Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3.71.4200 allows remote attackers to execute arbitrary code via vectors involving an HTML document on the server. Published: 2012-04-02T10:00:00.000Z Updated: 2024-08-06T18:16:20.157Z Open on db.gcve.eu Reference links http://secunia.com/advisories/48558 http://www.us-cert.gov/control_systems/pdf/ICSA-12-083-01.pdf https://exchange.xforce.ibmcloud.com/vulnerabilities/74388 http://osvdb.org/80650	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2958`	vulnerable	2026-06-08 04:58:09.878416	Details available Multiple cross-site scripting (XSS) vulnerabilities in Ecava IntegraXor before 3.60 (Build 4080) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2011-07-28T18:00:00.000Z Updated: 2024-08-06T23:15:32.024Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/68896 http://www.integraxor.com/blog/security-issue-xss-vulnerability-note http://www.us-cert.gov/control_systems/pdf/ICSA-11-147-02.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4599`	vulnerable	2026-06-08 04:56:29.602136	Details available Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2010-12-23T17:00:00.000Z Updated: 2024-08-07T03:51:17.643Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/45549 http://secunia.com/advisories/42734	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.