Approved changes feed: RSS · Atom

cpe:2.3:h:unisoon:ultralog_express:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorUnisoon (58af14a6-7fda-5a38-be8b-49ed757cc3dc)
ProductUltralog Express (6702618d-2dad-5111-b81e-41b8a7c8f515)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-3936 not_vulnerable 2026-06-08 05:25:57.935692 Unisoon UltraLog Express - SQL Injection
CRITICAL (10)
UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command.
Published: 2020-03-27T03:50:26.586Z
Updated: 2024-09-16T22:51:08.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3921 not_vulnerable 2026-06-08 05:25:57.887833 Unisoon UltraLog Express - Sensitive Data Exposure
HIGH (8.6)
UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page.
Published: 2020-03-27T03:50:26.138Z
Updated: 2024-09-17T01:41:03.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3920 not_vulnerable 2026-06-08 05:25:57.887071 Unisoon UltraLog Express - Broken Authentication
HIGH (8.1)
UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through specific system directory.
Published: 2020-03-27T03:50:25.735Z
Updated: 2024-09-17T02:16:00.930Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.