Tufin SecureChange R20-1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:tufin:securechange:r20-1:-:*:*:*:*:*:*

part: a version: r20-1 update: -

VendorTufin (5dd7f550-6a7f-587f-ad2a-aa7d6e844f45)
ProductSecurechange (01bfdf57-e005-5c56-a7b7-5ed21ea1a4bd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13134 vulnerable 2026-06-08 05:18:00.221209 Details available
Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS payload itself), and can exploit (be triggered by) admin users. All TOS versions with SecureChange deployments prior to R19.3 HF3 and R20-1 HF1 are affected. Vulnerabilities were fixed in R19.3 HF3 and R20-1 HF1.
Published: 2021-01-20T01:45:57.000Z
Updated: 2024-08-04T12:11:18.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13133 vulnerable 2026-06-08 05:18:00.220542 Details available
Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS payload itself), and can exploit (be triggered by) unauthenticated users. All TOS versions with SecureChange deployments prior to R19.3 HF3 and R20-1 HF1 are affected. Vulnerabilities were fixed in R19.3 HF3 and R20-1 HF1
Published: 2021-01-20T01:46:01.000Z
Updated: 2024-08-04T12:11:19.034Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.