29 matches found
SUSE: Security Advisory (SUSE-SU-2019:13947-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apache ActiveMQ message.jsp Cross-Site Scripting (CVE-2020-13947)
A cross-site scripting vulnerability exists in Apache ActiveMQ. The vulnerability is due to insufficient validation of a parameter in the web console...
CVE-2020-13947
CVE-2020-13947 affects Apache ActiveMQ’s web-based administration console (message.jsp). An XSS vulnerability arises from insufficient validation of user-supplied input in the console, allowing a remote attacker to execute script in a victim’s browser and potentially steal cookies or credentials....
CVE-2020-13947
An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0...
Apache ActiveMQ 5.x < 5.15.14 / 5.16.x < 5.16.1 Multiple Vulnerabilities
The version of Apache ActiveMQ running on the remote host is 5.x prior to 5.15.14 or 5.16.x prior to 5.16.1. It is, therefore, affected by multiple vulnerabilities including the following: - An authentication bypass vulnerability. The optional ActiveMQ LDAP login module can be configured to use...
CVE-2019-13947
A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The user configuration menu in the web interface of the Control Center Server CCS transfers user passwords in clear to the client browser. An attacker with administrative privileges for the web interface could b...
CVE-2019-13947
Summary (CVE-2019-13947) : In Siemens/SiNVR/CCS Control Center Server, versions prior to v1.5.0 expose a vulnerability where the web GUI transfers user passwords in clear text to the browser. An authenticated administrator can read other users’ passwords, not just reset them. The issue is documen...