Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 4:51 a.m.5 views

CVE-2023-28716

mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands...

8.8CVSS6.8AI score0.003EPSS
Exploits0References1
NVD
NVD
added 2023/04/27 11:15 p.m.10 views

CVE-2023-28716

mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands...

8.8CVSS8.7AI score0.003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/04/27 10:11 p.m.8 views

CVE-2023-28716 CVE-2023-28716

mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands...

7AI score0.003EPSS
Exploits0References1
CVE
CVE
added 2023/04/27 10:11 p.m.47 views

CVE-2023-28716

CVE-2023-28716 affects mySCADA myPRO 8.26.0 and earlier. Affected component: parameters handling in myPRO that allow an authenticated user to inject arbitrary operating system commands (OS command injection). Root cause: improper validation/handling of command-related parameters leading to code e...

8.8CVSS8.7AI score0.003EPSS
Exploits0References1Affected Software1
The Hacker News
The Hacker News
added 2023/04/07 5:59 a.m.49 views

CISA Warns of Critical ICS Flaws in Hitachi, mySCADA, ICL, and Nexx Products

The U.S. Cybersecurity and Infrastructure Security Agency CISA has published eight Industrial Control Systems ICS advisories warning of critical flaws affecting products from Hitachi Energy, mySCADA Technologies, Industrial Control Links, and Nexx. Topping the list is CVE-2022-3682 CVSS score: 9....

10CVSS9.9AI score0.63064EPSS
Exploits8
F5 Networks
F5 Networks
added 2023/02/21 6:54 p.m.45 views

K25451853: TMUI XSS vulnerability CVE-2022-28716

Security Advisory Description A DOM-based cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP AFM, CGNAT, and PEM Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. CVE-2022-28716 Impact An attacker ma...

8.8CVSS7.3AI score0.0074EPSS
Exploits0Affected Software3
NVD
NVD
added 2022/05/05 5:15 p.m.20 views

CVE-2022-28716

On 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x 11.6.x, a DOM-based cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP AFM, CGNAT, and PEM...

8.8CVSS0.0074EPSS
Exploits0References1
CVE
CVE
added 2022/05/05 4:41 p.m.114 views

CVE-2022-28716

CVE-2022-28716 is a DOM-based XSS in BIG-IP TMUI affecting AFM, CGNAT and PEM Configuration utilities. Affected versions: 16.1.x before 16.1.2.2; 15.1.x before 15.1.5.1; 14.1.x before 14.1.4.6; 13.1.x before 13.1.5; 12.1.x and 11.6.x. Fixes are: 16.1.2.2; 15.1.5.1; 14.1.4.6; 13.1.5. For 12.x and ...

8.8CVSS7.8AI score0.0074EPSS
Exploits0References1Affected Software3
Rows per page
Query Builder