Approved changes feed: RSS · Atom

cpe:2.3:a:topmanage:olk_webstore:2020:*:*:*:*:*:*:*

part: a version: 2020 update: *

VendorTopmanage (6281349a-22a3-5e29-9b19-eccbee66cf43)
ProductOlk Webstore (aafffe4d-3acc-5b18-a6cf-5fbed3bdfa61)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6845 vulnerable 2026-06-08 05:26:45.751804 Details available
An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin accounts can be taken over in a DOM-Based XSS attack.
Published: 2020-02-18T14:17:18.000Z
Updated: 2024-08-04T09:11:05.179Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6844 vulnerable 2026-06-08 05:26:45.751414 Details available
In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts.
Published: 2020-02-18T14:15:59.000Z
Updated: 2024-08-04T09:11:05.201Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.