Approved changes feed: RSS · Atom

cpe:2.3:o:epson:eps_tse_server_8_firmware:21.0.11:*:*:*:*:*:*:*

part: o version: 21.0.11 update: *

VendorEpson (2b370a58-1ea1-55ec-ba0d-8bb9e2673430)
ProductEps Tse Server 8 Firmware (711dfaa9-efd2-58cf-9a2d-a566dc34f99d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-28931 vulnerable 2026-06-08 05:23:56.616539 Details available
Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website.
Published: 2020-12-16T20:28:02.000Z
Updated: 2024-08-04T16:47:59.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28930 vulnerable 2026-06-08 05:23:56.615874 Details available
A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the user management page that is executed by an administrator.
Published: 2020-12-16T20:26:33.000Z
Updated: 2024-08-04T16:47:59.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28929 vulnerable 2026-06-08 05:23:56.614616 Details available
Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?download=1 URI.
Published: 2020-12-16T20:22:56.000Z
Updated: 2024-08-04T16:47:59.883Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.