Wipro Holmes 20.4.1
Approved changes feed: RSS · Atom
cpe:2.3:a:wipro:holmes:20.4.1:*:*:*:*:*:*:*part: a version: 20.4.1 update: *
| Vendor | Wipro (9771f88a-ea26-58f6-9a57-e895209e5c06) |
|---|---|
| Product | Holmes (022fb2f8-7619-5d53-8c09-d0ab233bb28e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-38283 |
vulnerable | 2026-06-08 05:32:55.830050 |
Details available
Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read application log files containing sensitive information via a predictable /log URI.
Published: 2021-11-29T07:45:45.000Z
Updated: 2024-08-04T01:37:16.316Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38147 |
vulnerable | 2026-06-08 05:32:55.491942 |
Details available
Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/Domain_Credential_Report_Excel, processexecution/DownloadExcelFile/User_Report_Excel, processexecution/DownloadExcelFile/Process_Report_Excel, processexecution/DownloadExcelFile/Infrastructure_Report_Excel, or processexecution/DownloadExcelFile/Resolver_Report_Excel.
Published: 2021-11-29T07:42:23.000Z
Updated: 2024-08-04T01:37:15.475Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38146 |
vulnerable | 2026-06-08 05:32:55.491522 |
Details available
The File Download API in Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data.
Published: 2021-11-22T08:34:58.000Z
Updated: 2024-08-04T01:37:15.574Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.