CVE-2018-8913

The vulnerability CVE-2018-8913 affects Synology Web Station prior to version 2.1.3-0139, caused by a missing custom error page. This allows remote attackers to perform phishing attacks using a crafted URL. Impact is phishing capability with partial confidentiality/integrity exposure reported by ...

CVE-2017-8913

The CVE-2017-8913 vulnerability affects SAP NetWeaver AS JAVA 7.5, specifically the Visual Composer VC70RUNTIME component. Affected files/components include VC70RUNTIME (7.30–7.50) and VCFRAMEWORK/VCFLEX7.00 as listed in public advisories. The issue is an XML External Entity (XXE) vulnerability t...

CVE-2015-8913

CVE-2015-8913 is rejected/not used and does not represent an active vulnerability entry.

CVE-2015-8913

...

CVE-2016-8913

CVE-2016-8913 affects IBM Kenexa LMS on Cloud. The vulnerability is a directory-traversal flaw where a remote attacker can craft URL requests containing dot-dot sequences (/../) to view arbitrary files. Affected versions include LMS on Cloud 4.1, 4.2, 4.2.2, 4.2.3, and 4.2.4; the issue is due to ...

SAP Netweaver AS Java - XXE vulnerability in Visual Composer VC70RUNTIME

Application: SAP NetWeaver Versions Affected: SAP NetWeaver AS JAVA 7.5 Vendor URL: SAP Bugs: XXE Reported: 17.06.2016 Vendor response: 18.06.2016 Date of Public Advisory: 14.02.2017 Reference: SAP Security Note 2386873 Author: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class: XXE Impact:...

CVE-2014-8913

CVE-2014-8913/8914 affect IBM Business Process Manager Process Portal across Standard/Express/Advanced 8.0.x–8.5.x. Root cause: insufficient input validation allowing XSS via crafted URLs. Impact: remote authenticated users can inject scripts (possible cookie theft) in the web UI. Remediation: ap...