CVE-2022-39055

creationtimestamp| type| source ---|---|--- 2022-10-18 12:13:52+00:00| seen| https://t.me/cibsecurity/51657 2025-05-09 15:25:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15750...

CVE-2022-39055 Changing Information Technology Inc. RAVA certificate validation system - Server-Side Request Forgery (SSRF)

RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to discover internal network topology base on query response...

CVE-2022-39055 Changing Information Technology Inc. RAVA certificate validation system - Server-Side Request Forgery (SSRF)

RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to discover internal network topology base on query response...

CVE-2022-39055

CVE-2022-39055 affects the RAVA certificate validation system from Changing Information Technology Inc. The vulnerability arises from inadequate filtering of URL parameters, enabling an unauthenticated remote attacker to perform a Server-Side Request Forgery (SSRF) to map internal network topolog...

CVE-2021-39055

creationtimestamp| type| source ---|---|--- 2022-03-14 19:18:24+00:00| seen| https://t.me/cibsecurity/38894...

CVE-2021-39055

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2021-39055

This CVE affects IBM Spectrum Copy Data Management (version 2.2.0.0 through 2.2.14.3). The root cause is an XSS vulnerability in the Web UI due to insufficient input validation/filtering, enabling an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted sess...