CVE-2020-15831

The provided connected documents confirm a concrete vulnerability: JetBrains TeamCity before 2019.2.3 is affected by a reflected XSS in the administration UI. The NVD entry reports CVSS v2 base 4.3 (Network, no authentication, partial integrity) and CVSS v3.1 base 6.1 (Network, no privileges, UI ...

CVE-2020-15831

JetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI...

CVE-2020-15831: Improper Neutralization of Input During Web Page Generation

JetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI...

CVE-2020-15830: Improper Neutralization of Input During Web Page Generation

JetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI...

CVE-2020-14444

An issue was discovered in WSO2 Identity Server through 5.9.0 and WSO2 IS as Key Manager through 5.9.0. A potential Reflected Cross-Site Scripting XSS vulnerability has been identified in the Management Console Policy Administration user interface...

Code injection

Sonatype Nexus Repository Manager versions 3.x before 3.12.0 has XSS in multiple areas in the Administration UI...

CVE-2018-12100

Sonatype Nexus Repository Manager versions 3.x before 3.12.0 has XSS in multiple areas in the Administration UI...

CVE-2018-12100

Sonatype Nexus Repository Manager versions 3.x before 3.12.0 has XSS in multiple areas in the Administration UI...

CVE-2018-12100

Sonatype Nexus Repository Manager versions 3.x before 3.12.0 has XSS in multiple areas in the Administration UI...

CVE-2018-12100

The CVE-2018-12100 issue affects Sonatype Nexus Repository Manager 3.x prior to 3.12.0, with XSS in multiple Administration UI paths. The underlying cause is insufficient input validation/output sanitization in user-facing parameters, enabling an attacker to inject arbitrary JavaScript into a vic...

CVE-2018-12100: Improper Neutralization of Input During Web Page Generation

Sonatype Nexus Repository Manager versions 3.x before 3.12.0 has XSS in multiple areas in the Administration UI...

CVE-2015-0150: Improper Access Control

The remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to bypass intended access restrictions via unspecified vectors...

Command injection

Command injection vulnerability in Trend Micro Smart Protection Server Standalone 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations...

CVE-2017-11395: Improper Neutralization of Special Elements used in an OS Command

Command injection vulnerability in Trend Micro Smart Protection Server Standalone 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations...

Citrix NetScaler Application Delivery Controller and NetScaler Gateway Information Disclosure Vulnerability (CNVD-2015-07704)

Citrix Systems NetScaler Service Delivery Appliance Service VM SVM, NetScaler Application Delivery Controller ADC, and NetScaler Gateway formerly Citrix Access Gateway Enterprise Edition are Citrix Systems products. NetScaler Service Delivery Appliance SVM SVM, NetScaler Application Delivery...

CVE-2015-7998

The administration UI in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allows attackers to obtain sensitive information v...

CVE-2015-7998: Exposure of Sensitive Information to an Unauthorized Actor

The administration UI in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 10.1 Build 133.9, 10.5 before Build 58.11, and 10.5.e before Build 56.1505.e on NetScaler Service Delivery Appliance Service VM SVM devices allows attackers to obtain sensitive information v...

Code injection

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a denial of service administration UI outage via unspecified vectors...

CVE-2014-6082: Undefined Security Weakness

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a denial of service administration UI outage via unspecified vectors...

CVE-2013-7258: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in web2ldap 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "displaying group DN and entry data in group administration UI."...