COINS Construction Cloud 11.12
Approved changes feed: RSS · Atom
cpe:2.3:a:coins-global:coins_construction_cloud:11.12:*:*:*:*:*:*:*part: a version: 11.12 update: *
| Vendor | Coins Global (3f7b377f-8f0f-53ae-bf94-9738c939ccde) |
|---|---|
| Product | Coins Construction Cloud (bc3e0942-3e8a-5093-a761-b9a793450c95) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-45228 |
vulnerable | 2026-06-08 05:36:47.996474 |
Details available
An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to store malicious JavaScript code in the task description. This is later executed when it is reflected back to the user.
Published: 2022-04-14T14:00:53.000Z
Updated: 2024-08-04T04:39:20.265Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45227 |
vulnerable | 2026-06-08 05:36:47.996180 |
Details available
An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionality is vulnerable to a persistent Cross-Site Scripting (XSS) attack.
Published: 2022-04-14T14:12:35.000Z
Updated: 2024-08-04T04:39:20.503Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45226 |
vulnerable | 2026-06-08 05:36:47.995763 |
Details available
An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause it to send password-reset e-mails pointing to arbitrary websites.
Published: 2022-01-24T19:57:39.000Z
Updated: 2024-08-04T04:39:20.265Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45225 |
vulnerable | 2026-06-08 05:36:47.995334 |
Details available
An issue was discovered in COINS Construction Cloud 11.12. Due to improper input neutralization, it is vulnerable to reflected cross-site scripting (XSS) via malicious links (affecting the search window and activity view window).
Published: 2022-01-24T19:58:04.000Z
Updated: 2024-08-04T04:39:20.378Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45224 |
vulnerable | 2026-06-08 05:36:47.994926 |
Details available
An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript code is passed as a URL parameter. Attackers can trivially alter this code to cause malicious behaviour. The application is therefore vulnerable to reflected XSS via malicious URLs.
Published: 2022-01-24T19:58:24.000Z
Updated: 2024-08-04T04:39:20.359Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45223 |
vulnerable | 2026-06-08 05:36:47.994496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45222 |
vulnerable | 2026-06-08 05:36:47.993967 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.