Approved changes feed: RSS · Atom

cpe:2.3:a:extensis:portfolio:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

VendorExtensis (4e712cb9-4175-5bc1-853b-4c7743f0d230)
ProductPortfolio (70d497f5-7d40-5083-ab63-2af574f504f9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-24255 vulnerable 2026-06-08 05:40:59.768322 Details available
Extensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to gain administrator privileges.
Published: 2022-03-01T23:00:32.000Z
Updated: 2026-07-09T00:17:13.277Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24254 vulnerable 2026-06-08 05:40:59.768015 Details available
An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted ZIP file.
Published: 2022-03-01T23:00:26.000Z
Updated: 2026-07-09T00:17:12.040Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24253 vulnerable 2026-06-08 05:40:59.767693 Details available
Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the component AdminFileTransferServlet.
Published: 2022-03-01T23:00:21.000Z
Updated: 2026-07-09T00:17:10.820Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24252 vulnerable 2026-06-08 05:40:59.767375 Details available
An unrestricted file upload vulnerability in the FileTransferServlet component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted file.
Published: 2022-03-01T23:00:15.000Z
Updated: 2026-07-09T00:17:09.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24251 vulnerable 2026-06-08 05:40:59.766948 Details available
Extensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload vulnerability via the Catalog Asset Upload function.
Published: 2022-03-01T23:00:09.000Z
Updated: 2026-07-09T00:17:08.362Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.