Approved changes feed: RSS · Atom

cpe:2.3:a:broadleafcommerce:broadleaf_commerce:5.1.14-ga:*:*:*:*:*:*:*

part: a version: 5.1.14-ga update: *

VendorBroadleafcommerce (6977ac4b-1f12-54e9-bf21-53bda746bca0)
ProductBroadleaf Commerce (507b2bc8-1793-556c-8dca-af30bd2a782c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/broadleafcommerce/broadleafcommerce purl2cpe 2026-06-01 10:12:58.441426
pkg:maven/org.broadleafcommerce/broadleaf purl2cpe 2026-06-01 10:12:58.441428

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-21266 vulnerable 2026-06-08 05:22:30.768765 Details available
Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting (XSS) due to a slow HTTP post vulnerability.
Published: 2020-10-29T13:32:27.000Z
Updated: 2024-08-04T14:22:25.547Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.