Approved changes feed: RSS · Atom

cpe:2.3:a:aca:assuweb:359.3:*:*:*:*:*:*:*

part: a version: 359.3 update: *

VendorAca (8eefadc0-e5fc-5f50-a6a3-11cb44685356)
ProductAssuweb (72c43f99-e1f6-587e-84e2-464c1f989b71)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3160 vulnerable 2026-06-03 14:45:10.212825 Details available
Deserialization of untrusted data in the login page of ASSUWEB 359.3 build 1 subcomponent of ACA ASSUREX RENTES product allows a remote attacker to inject unsecure serialized Java object using a specially crafted HTTP request, resulting in an unauthenticated remote code execution on the server.
Published: 2021-01-28T19:37:46.000Z
Updated: 2024-08-03T16:45:51.393Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.