Approved changes feed: RSS · Atom

cpe:2.3:a:prise:adas:1.7.0:*:*:*:*:*:*:*

part: a version: 1.7.0 update: *

VendorPrise (2ccedd88-932c-5bbb-a8ec-a0ce306b3216)
ProductAdas (9ffbf3a2-9ba1-5164-b367-ca48c536916a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15089 vulnerable 2026-06-08 05:12:56.654019 Details available
An issue was discovered in PRiSE adAS 1.7.0. Forms have no CSRF protection, letting an attacker execute actions as the administrator.
Published: 2019-09-20T13:43:08.000Z
Updated: 2024-08-05T00:34:53.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15088 vulnerable 2026-06-08 05:12:56.653740 Details available
An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, it is possible to bypass login authentication.
Published: 2019-09-20T13:42:40.000Z
Updated: 2024-08-05T00:34:53.123Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15087 vulnerable 2026-06-08 05:12:56.653270 Details available
An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading to remote code execution.
Published: 2019-09-20T13:42:17.000Z
Updated: 2024-08-05T00:34:53.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15086 vulnerable 2026-06-08 05:12:56.652956 Details available
An issue was discovered in PRiSE adAS 1.7.0. The newentityID parameter is not properly escaped, leading to a reflected XSS in the error message.
Published: 2019-09-20T13:41:46.000Z
Updated: 2024-08-05T00:34:53.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15085 vulnerable 2026-06-08 05:12:56.652546 Details available
An issue was discovered in PRiSE adAS 1.7.0. The current database password is embedded in the change password form.
Published: 2019-09-20T13:41:12.000Z
Updated: 2024-08-05T00:34:53.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14916 vulnerable 2026-06-08 05:12:56.418122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14915 vulnerable 2026-06-08 05:12:56.417699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14914 vulnerable 2026-06-08 05:12:56.417403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14913 vulnerable 2026-06-08 05:12:56.417094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14912 vulnerable 2026-06-08 05:12:56.416764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14911 vulnerable 2026-06-08 05:12:56.416260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.