Approved changes feed: RSS · Atom

cpe:2.3:a:plesk:onyx:17.8.11:*:*:*:*:*:*:*

part: a version: 17.8.11 update: *

VendorPlesk (3345643a-318d-5ab0-976e-f0ef8f5f3525)
ProductOnyx (c1123c8d-b035-5139-9447-55f3e14d6ccc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-43784 vulnerable 2026-06-08 06:12:38.002708 Details available
Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat.
Published: 2023-09-22T00:00:00.000Z
Updated: 2024-08-02T19:52:11.101Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11584 vulnerable 2026-06-08 05:16:47.447558 Details available
A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter.
Published: 2020-08-03T20:05:46.000Z
Updated: 2024-08-04T11:35:13.319Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.