Ocean Data Systems Dream Report 5 R20-2
Approved changes feed: RSS · Atom
cpe:2.3:a:dreamreport:dream_report:5_r20-2:*:*:*:*:*:*:*
part: a version: 5_r20-2 update: *
| Vendor | Dreamreport (212f9857-eda7-5512-a25d-17c662cb4d89) |
|---|---|
| Product | Dream Report (de2aef54-96d4-54f9-9546-dcdf89207c23) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-13534 |
vulnerable | 2026-06-08 05:18:00.751957 |
Details available
CRITICAL (9.3)
A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID), installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges which can lead to privilege escalation when used. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2021-04-09T17:50:07.000Z
Updated: 2024-08-04T12:18:18.453Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13533 |
vulnerable | 2026-06-08 05:18:00.751452 |
Details available
CRITICAL (9.3)
A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attackers to effectively ‘backdoor’ the installation files and escalate privileges when a new user logs in and uses the application.
Published: 2021-04-09T17:50:10.000Z
Updated: 2024-08-04T12:18:18.431Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13532 |
vulnerable | 2026-06-08 05:18:00.751000 |
Details available
CRITICAL (9.3)
A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashboard Service service binary can be replaced by attackers to escalate privileges to NT SYSTEM. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2021-04-09T17:50:13.000Z
Updated: 2024-08-04T12:18:18.282Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.