185 matches found
CVE-2017-9514
Bamboo before 6.0.5, 6.1.x before 6.1.4, and 6.2.x before 6.2.1 had a REST endpoint that parsed a YAML file and did not sufficiently restrict which classes could be loaded. An attacker who can log in to Bamboo as a user is able to exploit this vulnerability to execute Java code of their choice on...
8.8AI score0.01046EPSS
SaveExploits1References2
CVE-2014-9514
Cross-site scripting XSS vulnerability in BMC Footprints Service Core 11.5...
6.1CVSS6.1AI score0.00791EPSS
SaveExploits1References1
CVE-2014-9514
BMC Footprints Service Core 11.5 is affected by a cross-site scripting (XSS) vulnerability in its web UI. CNVD-2017-30588 states that a remote attacker can exploit this to inject arbitrary web script or HTML. The NVD entry confirms XSS in Footprints Service Core 11.5. No remediation details are p...
6.1CVSS6.1AI score0.00791EPSS
SaveExploits1References1Affected Software1
20