Tyler Technologies TaxWeb 3.13.3.1
Approved changes feed: RSS · Atom
cpe:2.3:a:tylertech:taxweb:3.13.3.1:*:*:*:*:*:*:*
part: a version: 3.13.3.1 update: *
| Vendor | Tylertech (03468356-e8a5-5102-9e07-f5b835e38b18) |
|---|---|
| Product | Taxweb (c2f00492-6cf7-5b61-9bf0-4656f861fa57) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-6285 |
vulnerable | 2026-06-08 05:04:55.831568 |
Details available
The search component in the Treasurer application in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to obtain sensitive query-structure information via an invalid search request, a different vulnerability than CVE-2013-6020.
Published: 2013-10-28T01:00:00.000Z
Updated: 2024-09-16T17:08:25.183Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6020 |
vulnerable | 2026-06-08 05:04:55.157942 |
Details available
passwordRequestPOST.jsp in Tyler Technologies TaxWeb 3.13.3.1 sends different HTTP status codes for invalid password-recovery requests depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of requests to the (1) Assessor, (2) Recorder, or (3) Treasurer application.
Published: 2013-10-28T01:00:00.000Z
Updated: 2024-09-16T22:31:05.228Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6019 |
vulnerable | 2026-06-08 05:04:55.157657 |
Details available
Cross-site scripting (XSS) vulnerability in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to inject arbitrary web script or HTML via the accountNum parameter to an unspecified component.
Published: 2013-10-28T01:00:00.000Z
Updated: 2024-09-16T17:33:42.618Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6018 |
vulnerable | 2026-06-08 05:04:55.157200 |
Details available
Cross-site request forgery (CSRF) vulnerability in login.jsp in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to hijack the authentication of arbitrary users for requests that change a password.
Published: 2013-10-28T01:00:00.000Z
Updated: 2024-09-16T22:16:11.440Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.