Approved changes feed: RSS · Atom

cpe:2.3:h:epson:eps_tse_server_8:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorEpson (2b370a58-1ea1-55ec-ba0d-8bb9e2673430)
ProductEps Tse Server 8 (b5c0707c-77b7-5abe-83f8-6441d763bc58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-28931 not_vulnerable 2026-06-08 05:23:56.616661 Details available
Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website.
Published: 2020-12-16T20:28:02.000Z
Updated: 2024-08-04T16:47:59.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28930 not_vulnerable 2026-06-08 05:23:56.615897 Details available
A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the user management page that is executed by an administrator.
Published: 2020-12-16T20:26:33.000Z
Updated: 2024-08-04T16:47:59.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28929 not_vulnerable 2026-06-08 05:23:56.615457 Details available
Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?download=1 URI.
Published: 2020-12-16T20:22:56.000Z
Updated: 2024-08-04T16:47:59.883Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.