Atos Unify OpenScape 4000 命令注入漏洞

Atos Unify OpenScape 4000 is an enterprise IP communications platform from Atos France. A security vulnerability exists in Atos Unify OpenScape 4000 that originates from allowing an attacker to run arbitrary commands on the platform operating system and gain administrative access. Affected Produc...

CVE-2023-29473

The CVE-2023-29473 issue affects Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform. The webservice on versions 10 R1 through 10 R1.34.3 (prior to 10 R1.34.4) permits an unauthenticated attacker to execute arbitrary OS commands, gaining administrative access. This is caused by...

CVE-2023-29475

The CVE-2023-29475 vulnerability affects Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform versions 10 R1 through 10 R1.34.3. An unauthenticated attacker can execute arbitrary commands on the platform OS and obtain administrative access (OSFOURK-23543). Affected versions requ...

CVE-2023-29475

inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543...

CVE-2023-29473

webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710...

PT-2023-22271 · Atos · Atos Unify Openscape 4000 Platform +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Platform versions 10 R1 through 10 R1.34.3 Atos Unify OpenScape 4000 Manager Platform versions 10 R1 through 10 R1.34.3 Description: The webservice in the affected platforms allows an unauthenticated attacker to run...

CVE-2023-29474

CVE-2023-29474 affects Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform (10 R1 to 10 R1.34.3). An unauthenticated attacker can execute arbitrary commands on the platform OS, achieving administrative access (OSFOURK-23552). mitigated by upgrading to OpenScape 4000 version 10 ...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects TS3100/TS3200 (CVE-2015-4000)

...

Debian: Security Advisory (DLA-507-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : nrpe (SUSE-SU-2023:0586-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0586-1 advisory. - CVE-2015-4000: Fixed Logjam Attack by increasing the standard size of 512 bit dh parameters to 2048 bsc931600, bsc938906. Tenable has...

SA40002 - [Pulse Secure] June 11th 2015 OpenSSL Security Advisory

Last Modified Date Aug 24, 2026 12:34:42 AM...

CVE-2022-44032

A possible race condition was found in drivers/char/pcmcia/cm4000cs.c between the cmmopen and the cm4000detach functions if the user physically removes the PCMCIA device in the Linux kernel. This flaw may eventually result in a use-after-free UAF flaw. Mitigation This flaw can be mitigated by...

CVE-2022-46404

A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager 8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4 that may allow an unauthenticated attacker to upload arbitrary files and achieve administrative access to th...

CVE-2022-46404

The CVE-2022-46404 issue affects Atos Unify OpenScape 4000 Assistant and OpenScape 4000 Manager. A command-injection vulnerability exists in the affected components, with versions affected as 8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4, which could allow an unauthenticated atta...

CVE-2022-46404

A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager 8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4 that may allow an unauthenticated attacker to upload arbitrary files and achieve administrative access to th...

Atos Unify OpenScape 4000 命令注入漏洞

Atos Unify OpenScape 4000 is an enterprise IP communications platform from Atos France. A security vulnerability exists in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager, which stems from the presence of a command injection vulnerability that could allow an unauthenticated...

CVE-2022-4000

CVE-2022-4000 affects the WooCommerce Shipping WordPress plugin (versions up to 1.2.11). The issue is due to insufficient sanitisation/escaping of certain settings, enabling Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed, including multisite setups. Publ...

CVE-2022-4000 WooCommerce Shipping - DPD baltic < 1.2.11 - Admin+ Stored XSS

The WooCommerce Shipping WordPress plugin through 1.2.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

SUSE: Security Advisory (SUSE-SU-2022:4000-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : python-Twisted (SUSE-SU-2022:4000-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4000-1 advisory. - CVE-2022-39348: Fixed NameVirtualHost Host header injection bsc1204781. Tenable has extracted the preceding description bloc...