Approved changes feed: RSS · Atom

cpe:2.3:a:opentext:exceed_ondemand:8.0:*:*:*:*:*:*:*

part: a version: 8.0 update: *

VendorOpentext (5717091c-f148-5db6-be32-940ef0cdacf9)
ProductExceed Ondemand (01b61de5-2eff-5a1b-bf40-678d93c94b8c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6994 vulnerable 2026-06-03 14:33:33.297718 Details available
OpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing the network.
Published: 2014-05-19T14:00:00.000Z
Updated: 2024-08-06T17:53:45.822Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6807 vulnerable 2026-06-03 14:33:32.626636 Details available
The client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses.
Published: 2014-05-19T14:00:00.000Z
Updated: 2024-08-06T17:46:23.564Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6806 vulnerable 2026-06-03 14:33:32.626365 Details available
OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext.
Published: 2014-05-19T14:00:00.000Z
Updated: 2024-08-06T17:46:23.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6805 vulnerable 2026-06-03 14:33:32.626010 Details available
OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffing the network or (2) local users to discover credentials by reading a .eod8 file.
Published: 2014-05-19T14:00:00.000Z
Updated: 2024-08-06T17:46:23.408Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.