Approved changes feed: RSS · Atom

cpe:2.3:a:eramba:eramba:2.19.3:*:*:*:enterprise:*:*:*

part: a version: 2.19.3 update: *

VendorEramba (55f7d665-cc4a-58f1-b0c0-1ca2af1ccffb)
ProductEramba (d5ce3fa3-c5b1-5916-aabd-9183ed290887)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-25105 vulnerable 2026-06-08 05:22:35.999788 Details available
eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has only a million possibilities).
Published: 2020-09-03T14:19:27.000Z
Updated: 2024-08-04T15:26:09.974Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25104 vulnerable 2026-06-08 05:22:35.999058 Details available
eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename has a complete XSS payload followed by the .png extension.
Published: 2020-09-03T14:20:12.000Z
Updated: 2024-08-04T15:26:09.503Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.