Approved changes feed: RSS · Atom

cpe:2.3:a:free:freebox_os:3.0.2:*:*:*:*:*:*:*

part: a version: 3.0.2 update: *

VendorFree (6410cab4-060e-59bb-ba69-1b618589441d)
ProductFreebox Os (896117bd-4deb-5f95-9df5-f9b6bbb38b46)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9405 vulnerable 2026-06-03 14:34:26.826775 Details available
A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code.
Published: 2020-01-06T21:16:38.000Z
Updated: 2024-08-06T13:40:25.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9382 vulnerable 2026-06-03 14:34:26.782260 Details available
Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation
Published: 2020-01-13T13:42:07.000Z
Updated: 2024-08-06T13:40:24.966Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.