Approved changes feed: RSS · Atom

cpe:2.3:a:x2go:x2go_server:4.0.0.0:*:*:*:*:*:*:*

part: a version: 4.0.0.0 update: *

VendorX2Go (81fbec3b-7d99-5154-9bac-2b1b3203a6eb)
ProductX2Go Server (25e0b1a8-501b-52d7-8a4a-ecc1c563e399)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/x2goserver purl2cpe 2026-06-01 10:17:18.153300
pkg:deb/ubuntu/x2goserver purl2cpe 2026-06-01 10:17:18.153304
pkg:github/ahesford/x2goserver purl2cpe 2026-06-01 10:17:18.153306
pkg:github/binao/x2goserver purl2cpe 2026-06-01 10:17:18.153309
pkg:github/eugenesan/x2goserver purl2cpe 2026-06-01 10:17:18.153312
pkg:rpm/fedora/x2goserver purl2cpe 2026-06-01 10:17:18.153314
pkg:rpm/opensuse/x2goserver purl2cpe 2026-06-01 10:17:18.153317

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7383 vulnerable 2026-06-08 05:05:10.195180 Details available
x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possibly related to backticks.
Published: 2014-05-20T14:00:00.000Z
Updated: 2024-08-06T18:09:17.062Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4376 vulnerable 2026-06-08 05:04:35.791602 Details available
The setgid wrapper libx2go-server-db-sqlite3-wrapper.c in X2Go Server before 4.0.0.2 allows remote attackers to execute arbitrary code via unspecified vectors, related to the path to libx2go-server-db-sqlite3-wrapper.pl.
Published: 2013-12-09T11:00:00.000Z
Updated: 2024-08-06T16:38:02.171Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.