Scytl Secure Vote (sVote) 2.1
Approved changes feed: RSS · Atom
cpe:2.3:a:scytl:secure_vote:2.1:*:*:*:*:*:*:*part: a version: 2.1 update: *
| Vendor | Scytl (9315922f-9534-52cf-b982-88f343a649cc) |
|---|---|
| Product | Secure Vote (96c93728-e79f-5923-8a2b-744ddfcba96d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25023 |
vulnerable | 2026-06-08 05:13:41.827853 |
Details available
An issue was discovered in Scytl sVote 2.1. Because the IP address from an X-Forwarded-For header (which can be manipulated client-side) is used for the internal application logs, an attacker can inject wrong IP addresses into these logs.
Published: 2021-02-27T04:22:59.000Z
Updated: 2024-08-05T03:00:19.173Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25022 |
vulnerable | 2026-06-08 05:13:41.827463 |
Details available
An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event and injecting a payload over an event alias, because the application calls Runtime.getRuntime().exec() without validation.
Published: 2021-02-27T04:21:59.000Z
Updated: 2024-08-05T03:00:18.979Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25021 |
vulnerable | 2026-06-08 05:13:41.826938 |
Details available
An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the admin password. A different password cannot be set because of the implementation in code.
Published: 2021-02-27T04:26:19.000Z
Updated: 2024-08-05T03:00:18.952Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25020 |
vulnerable | 2026-06-08 05:13:41.826547 |
Details available
An issue was discovered in Scytl sVote 2.1. Because the sdm-ws-rest API does not require authentication, an attacker can retrieve the administrative configuration by sending a POST request to the /sdm-ws-rest/preconfiguration URI.
Published: 2021-02-27T04:27:38.000Z
Updated: 2024-08-05T03:00:18.922Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.