Approved changes feed: RSS · Atom

cpe:2.3:a:mv:mconnect:2013.1.6.8:*:*:*:*:*:*:*

part: a version: 2013.1.6.8 update: *

VendorMv (9de126cb-b268-5dd9-bd86-1109903952f9)
ProductMconnect (91d86880-93e5-573c-acc9-c24648e134f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/ifmacedo/mconnect purl2cpe 2026-06-01 10:16:59.827270

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-23283 vulnerable 2026-06-08 05:22:31.860697 Details available
Information disclosure in Logon Page in MV's mConnect application v02.001.00 allows an attacker to know valid users from the application's database via brute force.
Published: 2021-07-21T12:49:49.000Z
Updated: 2024-08-04T14:58:14.567Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23282 vulnerable 2026-06-08 05:22:31.856207 Details available
SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with a generic password to connect to the application and get access to unauthorized information.
Published: 2021-07-21T13:13:33.000Z
Updated: 2024-08-04T14:58:14.705Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.