Approved changes feed: RSS · Atom

cpe:2.3:a:novastar:novaicare:7.16.0:*:*:*:*:*:*:*

part: a version: 7.16.0 update: *

VendorNovastar (c19ba48b-3ec5-5732-a1b4-ef3ac5c191b0)
ProductNovaicare (0084b2ef-547a-5aa6-9313-ba949184bd10)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-38289 vulnerable 2026-06-08 05:32:55.831663 Details available
An issue has been discovered in Novastar-VNNOX-iCare Novaicare 7.16.0 that gives attacker privilege escalation and allows attackers to view corporate information and SMTP server details, delete users, view roles, and other unspecified impacts. NOTE: As of April 2026, the vendor has officially decommissioned the affected legacy endpoints and associated services. The vulnerability is mitigated as the functional logic is no longer operational and the URLs have been removed from production.
Published: 2022-07-12T12:33:15.000Z
Updated: 2026-04-07T16:48:44.204Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.