Approved changes feed: RSS · Atom

cpe:2.3:a:safe:fme_server:2019.0:*:*:*:*:*:*:*

part: a version: 2019.0 update: *

VendorSafe (797cc2ac-05d1-5b1e-a059-717fc0ddc894)
ProductFme Server (429f7b4c-6e56-53c6-a4f1-bcc5d6c3b32a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-22790 vulnerable 2026-06-08 05:22:31.653735 Details available
Authenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to execute codeby injecting arbitrary web script or HTML via modifying the name of the users. The XSS is executed when an administrator access the logs.
Published: 2021-04-28T20:42:54.000Z
Updated: 2024-08-04T14:51:10.824Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-22789 vulnerable 2026-06-08 05:22:31.650343 Details available
Unauthenticated Stored XSS in FME Server versions 2019.2 and 2020.0 Beta allows a remote attacker to gain admin privileges by injecting arbitrary web script or HTML via the login page. The XSS is executed when an administrator accesses the logs.
Published: 2021-04-28T20:43:05.000Z
Updated: 2024-08-04T14:51:10.755Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.