143 matches found
CVE-2023-27271
In SAP BusinessObjects Business Intelligence Platform Web Services - versions 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect to its own admintools, leading to a high impact on availability...
CVE-2022-22546
Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence BI Launchpad - version 420...
CVE-2024-55548
Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e...
CVE-2024-55548
Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e...
CVE-2024-55545
Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...
CVE-2024-55546
Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...
CVE-2024-55545
Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...
CVE-2024-55547
SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e...
CVE-2024-55548
CVE-2024-55548 concerns the ORing IAP-420 wireless access point. The vulnerability stems from an improper check of password character length in the ORing operation, reported to affect versions through 2.01e. The resulting condition can cause a forced deadlock. Multiple sources corroborate this is...
CVE-2024-55548 Denial of Service
Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e...
CVE-2024-55548 Denial of Service
Improper check of password character lenght in ORing IAP-420 allows a forced deadlock. This issue affects IAP-420: through 2.01e...
CVE-2024-55547 Remote Command Execution via SNMP
SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e...
CVE-2024-55547 Remote Command Execution via SNMP
SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e...
CVE-2024-55547
CVE-2024-55547 describes a command-injection vulnerability in NET-SNMP used by ORing IAP-420 via SNMP objects. Affected product is ORing IAP-420 (firmware up to 2.01e). Root cause: SNMP objects in NET-SNMP enable command execution; impact is manifested as remote command execution with high confid...
CVE-2024-55546 Stored Cross-Site Scripting
Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...
CVE-2024-55546
The CVE refers to ORing IAP-420, where the web interface lacks input validation, allowing stored XSS in versions 2.01e and earlier. The incident is described across multiple sources (Red Hat/CNNVD/CVE records and PT-Security). Root cause: insufficient input validation in the product’s web interfa...
CVE-2024-55546 Stored Cross-Site Scripting
Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...
CVE-2024-55544
Missing input validation in the ORing IAP-420 web-interface allows authenticated Command Injections on OS level.This issue affects IAP-420 version 2.01e and below...
CVE-2024-55545 Reflected Cross-Site Scripting
Missing input validation in the ORing IAP-420 web-interface allows Cross-Site Scripting XSS.This issue affects IAP-420 version 2.01e and below...
CVE-2024-55545
CVE-2024-55545 affects ORing IAP-420 devices (web interface) with input validation failure leading to Reflected XSS in versions 2.01e and earlier. The root cause is missing input validation in the IAP-420 web UI, enabling cross-site scripting. Impact is client-side compromise through injected scr...