Approved changes feed: RSS · Atom

cpe:2.3:a:tcman:gim:8.0:*:*:*:*:*:*:*

part: a version: 8.0 update: *

VendorTcman (ced398ff-b9e4-5a7a-a979-82a5bbca5379)
ProductGim (bc69e7f0-3f96-5903-bac5-5342739f847c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-40853 vulnerable 2026-06-08 05:35:19.175304 TCMAN GIM missing authorization vulnerability
HIGH (7.2)
TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible information.
Published: 2021-12-17T16:10:33.560Z
Updated: 2024-09-17T00:21:18.085Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40852 vulnerable 2026-06-08 05:35:19.174907 TCMAN GIM open redirect vulnerability
MEDIUM (6.1)
TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages controlled by the attacker. The exploitation of this vulnerability might allow a remote attacker to obtain information.
Published: 2021-12-17T16:10:32.835Z
Updated: 2024-09-16T18:56:14.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40851 vulnerable 2026-06-08 05:35:19.174514 TCMAN GIM SQL injection vulnerability
HIGH (7.5)
TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploitation of this vulnerability might allow a remote attacker to obtain information.
Published: 2021-12-17T16:10:32.086Z
Updated: 2024-09-16T19:00:34.099Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40850 vulnerable 2026-06-08 05:35:19.173278 TCMAN GIM SQL injection vulnerability
CRITICAL (10)
TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx.
Published: 2021-12-17T16:10:31.282Z
Updated: 2024-09-16T16:18:05.768Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.