Security Advisory 0137

Security Advisory 0137 PDF Date: May 5, 2026 Revision | Date | Changes ---|---|--- 1.0 | May 5, 2026 | Initial release 1.1 | May 7, 2026 | Clarified 7280R3, 7500R3 and 7800R3 exposure is limited 1.2 | May 13, 2026 | Updated Mitigation section with a note of caution 1.3 | May 20, 2026 | Updated...

CVE-2025-7473

creationtimestamp| type| source ---|---|--- 2025-10-21 12:45:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3pee2cn7m2o...

EUVD-2015-7473

Malware in sbrugna...

CVE-2013-7473

Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account...

CVE-2024-7473

An IDOR vulnerability exists in the 'Evaluations' function of the 'umgws datasets' section in lunary-ai/lunary versions 1.3.2. This vulnerability allows an authenticated user to update other users' prompts by manipulating the 'id' parameter in the request. The issue is fixed in version 1.4.3...

CVE-2024-7473

creationtimestamp| type| source ---|---|--- 2024-10-29 14:46:40+00:00| seen| https://t.me/cvedetector/9316...

CVE-2024-7473 IDOR Vulnerability in lunary-ai/lunary

An IDOR vulnerability exists in the 'Evaluations' function of the 'umgws datasets' section in lunary-ai/lunary versions 1.3.2. This vulnerability allows an authenticated user to update other users' prompts by manipulating the 'id' parameter in the request. The issue is fixed in version 1.4.3...

RHCOS 4 : OpenShift Container Platform 4.14.4 (RHSA-2023:7473)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7473 advisory. - python-werkzeug: high resource usage when parsing multipart form data with many fields CVE-2023-25577 - haproxy: Proxy forwards...

ShareFile Documents Unauthenticated Access (CVE-2020-7473)

Binary data citrixsharefilecontrollerCVE-2020-7473.nbin...

Remote code execution

An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, which allows remote code execution. RCE and file access is granted to everything hosted by ShareFile, be it on-premise or...

CVE-2020-7473

CVE-2020-7473 refers to unauthenticated access to documents/folders in Citrix ShareFile StorageZones Controller. According to the description, exploitability depends on the product version used when the storage zone was created, not the version at assessment time. The vulnerability can be trigger...

Warning: Citrix ShareFile Flaw Could Let Attackers Steal Corporate Secrets

Since the past few weeks, software giant Citrix has privately been rolling out a critical software update to its enterprise customers that patches multiple security vulnerabilities affecting Citrix ShareFile content collaboration platform. The security advisory—about which The Hacker News learned...

Citrix ShareFile storage zones Controller multiple security updates

Description of Problem Security issues have been identified in customer-managed Citrix ShareFile storage zone controllers. These vulnerabilities, if exploited, would allow an unauthenticated attacker to compromise the storage zones controller potentially giving an attacker the ability to access...

CVE-2013-7473

creationtimestamp| type| source ---|---|--- 2019-08-01 18:27:57+00:00| seen| https://t.me/cibsecurity/5871...

CVE-2016-7473

CVE-2016-7473 entry is rejected/not used as stated; it does not represent an active vulnerability entry.

CVE-2016-7473

...

CVE-2018-7473

CVE-2018-7473: Open redirect in the SO Connect SO WIFI hotspot web interface (versions before 140) allows remote attackers to redirect users to arbitrary websites via a URL, enabling phishing. Affected product: SO WIFI hotspot web interface. Impact: user redirection/phishing discussed in sources;...

CVE-2017-7473

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA based off of CNT 3. Further investigation determined that there was a secure method for using the directive. Notes: none...

CVE-2017-7473

CVE-2017-7473 is withdrawn as a candidate. Connected documents confirm the issue concerns Ansible (versions 2.2.3 and earlier) with information disclosure caused by the interaction of callback plugins and the no_log directive, leading to improper sanitization of leaked data. The vulnerability aff...

CVE-2014-7473

CVE-2014-7473 is rejected/not used; this CVE ID does not represent an active vulnerability entry.