SecZetta NEProfile 3.3.11
Approved changes feed: RSS · Atom
cpe:2.3:a:seczetta:neprofile:3.3.11:*:*:*:*:*:*:*part: a version: 3.3.11 update: *
| Vendor | Seczetta (c02e8a91-05a6-5cc9-9df1-05f12b982892) |
|---|---|
| Product | Neprofile (7a2a4753-7cd0-5c9d-8545-1753c58860dc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-12855 |
vulnerable | 2026-06-08 05:17:59.463137 |
Details available
A Host header injection vulnerability has been discovered in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can poison this header resulting in an adversary controlling the execution flow for the 302 HTTP status.
Published: 2020-08-26T18:49:04.000Z
Updated: 2024-08-04T12:04:22.955Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12854 |
vulnerable | 2026-06-08 05:17:59.462737 |
Details available
A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a carefully crafted JPEG file as part of the profile avatar.
Published: 2020-07-15T19:04:14.000Z
Updated: 2024-08-04T12:04:22.959Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.