https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 23 Jul 2026 06:12:46 +0000 https://db.gcve.eu/sighting/c90ddc04-c402-4f6e-a53d-3887d76ab3d5/export {"uuid": "c90ddc04-c402-4f6e-a53d-3887d76ab3d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25563", "type": "seen", "source": "https://t.me/cibsecurity/27201", "content": "\u203c CVE-2020-25563 \u203c\n\nIn SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave (Automation Tasks) feature and not having a JSESSIONID.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T00:39:05.000000Z"} {"uuid": "c90ddc04-c402-4f6e-a53d-3887d76ab3d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25563", "type": "seen", "source": "https://t.me/cibsecurity/27201", "content": "\u203c CVE-2020-25563 \u203c\n\nIn SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave (Automation Tasks) feature and not having a JSESSIONID.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T00:39:05.000000Z"} https://db.gcve.eu/sighting/c90ddc04-c402-4f6e-a53d-3887d76ab3d5/export Thu, 12 Aug 2021 00:39:05 +0000 https://db.gcve.eu/sighting/8a7f12c4-a1f6-4f5a-b28a-c5065117890d/export {"uuid": "8a7f12c4-a1f6-4f5a-b28a-c5065117890d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25561", "type": "seen", "source": "https://t.me/cibsecurity/27199", "content": "\u203c CVE-2020-25561 \u203c\n\nSapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. This credential is saved in ServerConf.config file in the client.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T00:39:03.000000Z"} {"uuid": "8a7f12c4-a1f6-4f5a-b28a-c5065117890d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25561", "type": "seen", "source": "https://t.me/cibsecurity/27199", "content": "\u203c CVE-2020-25561 \u203c\n\nSapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. This credential is saved in ServerConf.config file in the client.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T00:39:03.000000Z"} https://db.gcve.eu/sighting/8a7f12c4-a1f6-4f5a-b28a-c5065117890d/export Thu, 12 Aug 2021 00:39:03 +0000 https://db.gcve.eu/sighting/43d70c62-eb6c-446c-a364-199263f9f03e/export {"uuid": "43d70c62-eb6c-446c-a364-199263f9f03e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25564", "type": "seen", "source": "https://t.me/cibsecurity/27197", "content": "\u203c CVE-2020-25564 \u203c\n\nIn SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessing RemoteMgmtTaskSave (Automation Tasks) feature.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T00:39:00.000000Z"} {"uuid": "43d70c62-eb6c-446c-a364-199263f9f03e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25564", "type": "seen", "source": "https://t.me/cibsecurity/27197", "content": "\u203c CVE-2020-25564 \u203c\n\nIn SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessing RemoteMgmtTaskSave (Automation Tasks) feature.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T00:39:00.000000Z"} https://db.gcve.eu/sighting/43d70c62-eb6c-446c-a364-199263f9f03e/export Thu, 12 Aug 2021 00:39:00 +0000 https://db.gcve.eu/sighting/393ec47d-a8e6-499b-a349-945125e0f8df/export {"uuid": "393ec47d-a8e6-499b-a349-945125e0f8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25562", "type": "seen", "source": "https://t.me/cibsecurity/27195", "content": "\u203c CVE-2020-25562 \u203c\n\nIn SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to CSRF vulnerabilities in critical application forms like account resent.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T00:38:55.000000Z"} {"uuid": "393ec47d-a8e6-499b-a349-945125e0f8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25562", "type": "seen", "source": "https://t.me/cibsecurity/27195", "content": "\u203c CVE-2020-25562 \u203c\n\nIn SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to CSRF vulnerabilities in critical application forms like account resent.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T00:38:55.000000Z"} https://db.gcve.eu/sighting/393ec47d-a8e6-499b-a349-945125e0f8df/export Thu, 12 Aug 2021 00:38:55 +0000 https://db.gcve.eu/sighting/fa50defd-8578-49fa-8055-64eff948b35b/export {"uuid": "fa50defd-8578-49fa-8055-64eff948b35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25565", "type": "seen", "source": "https://t.me/cibsecurity/27192", "content": "\u203c CVE-2020-25565 \u203c\n\nIn SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on \u00e2\u20ac\u0153ping\u00e2\u20ac\ufffd, \u00e2\u20ac\u0153traceroute\u00e2\u20ac\ufffd and \u00e2\u20ac\u0153snmp\u00e2\u20ac\ufffd functions and execute code on the server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T00:38:52.000000Z"} {"uuid": "fa50defd-8578-49fa-8055-64eff948b35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25565", "type": "seen", "source": "https://t.me/cibsecurity/27192", "content": "\u203c CVE-2020-25565 \u203c\n\nIn SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on \u00e2\u20ac\u0153ping\u00e2\u20ac\ufffd, \u00e2\u20ac\u0153traceroute\u00e2\u20ac\ufffd and \u00e2\u20ac\u0153snmp\u00e2\u20ac\ufffd functions and execute code on the server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T00:38:52.000000Z"} https://db.gcve.eu/sighting/fa50defd-8578-49fa-8055-64eff948b35b/export Thu, 12 Aug 2021 00:38:52 +0000 https://db.gcve.eu/sighting/6e12934a-f08b-45a0-8582-c2652f0bbe04/export {"uuid": "6e12934a-f08b-45a0-8582-c2652f0bbe04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25560", "type": "seen", "source": "https://t.me/cibsecurity/27188", "content": "\u203c CVE-2020-25560 \u203c\n\nIn SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on \u00e2\u20ac\u0153ping\u00e2\u20ac\ufffd, \u00e2\u20ac\u0153traceroute\u00e2\u20ac\ufffd and \u00e2\u20ac\u0153snmp\u00e2\u20ac\ufffd functions and execute code on the server. We also observed the same is true if the JSESSIONID is completely removed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T00:38:45.000000Z"} {"uuid": "6e12934a-f08b-45a0-8582-c2652f0bbe04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25560", "type": "seen", "source": "https://t.me/cibsecurity/27188", "content": "\u203c CVE-2020-25560 \u203c\n\nIn SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on \u00e2\u20ac\u0153ping\u00e2\u20ac\ufffd, \u00e2\u20ac\u0153traceroute\u00e2\u20ac\ufffd and \u00e2\u20ac\u0153snmp\u00e2\u20ac\ufffd functions and execute code on the server. We also observed the same is true if the JSESSIONID is completely removed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-12T00:38:45.000000Z"} https://db.gcve.eu/sighting/6e12934a-f08b-45a0-8582-c2652f0bbe04/export Thu, 12 Aug 2021 00:38:45 +0000