Code injection

IBM Security Verify Governance 10.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225232...

CVE-2022-22470 IBM Security Verify Governance information disclosure

IBM Security Verify Governance 10.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225232...

CVE-2022-22470 IBM Security Verify Governance information disclosure

IBM Security Verify Governance 10.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225232...

CVE-2022-22470

CVE-2022-22470 affects IBM Security Verify Governance 10.0, where credentials are stored in plain clear text and readable by a local user due to insecure storage. The Red Hat/IBM IBM bulletin confirms the issue with a CVSS base score around 4.1 (C:H, I:N, A:N) and local access as the attack vecto...

CVE-2022-37308

OX App Suite through 7.10.6 allows XSS via HTML in text/plain e-mail messages...

CVE-2022-37308: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.6 allows XSS via HTML in text/plain e-mail messages...

PT-2022-23915 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.6 and earlier Description: The issue allows for cross-site scripting XSS attacks via HTML in text/plain e-mail messages. This can potentially lead to the execution of malicious scripts on the client-side...

CVE-2022-37308

OX App Suite through 7.10.6 allows XSS via HTML in text/plain e-mail messages...

SolarWinds Platform 2022.4.1

The version of SolarWinds Platform installed on the remote host is prior to 2022.4.1. It is, therefore, affected by a vulnerability as referenced in the hybridcloudobservabilitysolarwindsplatform202241 advisory. - Sensitive information was stored in plain text in a file that is accessible by a us...

CVE-2022-22458

IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read by a remote authenticated user. IBM X-Force ID: 225009...

CVE-2022-22458

IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read by a remote authenticated user. IBM X-Force ID: 225009...

CVE-2022-22457

IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 225007...

Design/Logic Flaw

IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 225007...

CVE-2022-22458

CVE-2022-22458 affects IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1. The root cause is that user credentials are stored in plaintext, allowing a remote authenticated user to read them. The related IBM bulletin confirms the same CVE and lists a fix path for t...

PT-2022-15446

Name of the Vulnerable Software and Affected Versions IBM Security Verify Governance, Identity Manager version 10.0.1 Description The issue allows a remote authenticated user to read user credentials stored in plain clear text. Recommendations For IBM Security Verify Governance, Identity Manager...

CVE-2022-47512

CVE-2022-47512 affects SolarWinds Hybrid Cloud Observability / SolarWinds Platform 2022.4 (prior to 2022.4.1). The issue is that sensitive information was stored in plain text in a file accessible to a local-accoung user, leading to potential confidentiality impact (CVE-2022-47512). The CVSS cont...

CVE-2022-47512

Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability HCO/ SolarWinds Platform 2022.4. No other versions are affected...

CVE-2022-47512

Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability HCO/ SolarWinds Platform 2022.4. No other versions are affected...

Authentication flaw

Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability HCO/ SolarWinds Platform 2022.4. No other versions are affected...

SolarWinds Platform 安全漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A security vulnerability exists in SolarWinds Platform version 2022.4 that stems from sensitive information being stored in plain text in a file that can be accessed by a...