Approved changes feed: RSS · Atom

cpe:2.3:a:seeddms:seeddms:6.0.15:*:*:*:*:*:*:*

part: a version: 6.0.15 update: *

VendorSeeddms (83b320d9-c6a9-5f2f-9036-249c7e2c38c7)
ProductSeeddms (47b2be21-9319-599e-904d-1e06425b9f4a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/knitter/seeddms-alt purl2cpe 2026-06-01 10:11:30.400495
pkg:sourceforce/seeddms purl2cpe 2026-06-01 10:11:30.400496

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-45408 vulnerable 2026-06-08 05:36:48.102283 Details available
Open Redirect vulnerability exists in SeedDMS 6.0.15 in out.Login.php, which llows remote malicious users to redirect users to malicious sites using the "referuri" parameter.
Published: 2022-02-04T19:43:01.000Z
Updated: 2024-08-04T04:39:20.649Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39425 vulnerable 2026-06-08 05:33:50.191169 Details available
SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.
Published: 2023-07-20T00:00:00.000Z
Updated: 2024-10-24T16:51:31.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39421 vulnerable 2026-06-08 05:33:50.190777 Details available
A cross-site scripting (XSS) vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Published: 2023-07-24T00:00:00.000Z
Updated: 2024-10-24T15:51:26.992Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33223 vulnerable 2026-06-08 05:32:11.022281 Details available
An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in the out.UsrMgr.php file.
Published: 2023-06-07T00:00:00.000Z
Updated: 2025-01-07T16:21:59.015Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.