CVE-2017-14995

CVE-2017-14995: A stored XSS vulnerability in the Management Console affects multiple WSO2 products (WSO2 Application Server 5.3.0; WSO2 Business Process Server 3.6.0; WSO2 Business Rules Server 2.2.0; WSO2 Complex Event Processor 4.2.0; WSO2 Dashboard Server 2.0.0; WSO2 Data Analytics Server 3.1...

WSO2 Data Analytics Server Multiple XSS Vulnerabilities

WSO2 Data Analytics Server is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WSO2 Data Analytics Server Cross-Site Scripting Vulnerability

WSO2 Data Analytics Server is a data analytics server from WSO2, Inc. that provides real-time analysis of data streams, complex event processing, and machine learning. A cross-site scripting vulnerability exists in the carbon/resources/addcollectionajaxprocessor.jsp file in WSO2 Data Analytics...

Design/Logic Flaw

WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/addcollectionajaxprocessor.jsp via the collectionName or parentPath parameter...

CVE-2017-14651

WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/addcollectionajaxprocessor.jsp via the collectionName or parentPath parameter...

CVE-2017-14651

WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/addcollectionajaxprocessor.jsp via the collectionName or parentPath parameter...

CVE-2017-14651

Summary: CVE-2017-14651 affects WSO2 Data Analytics Server 3.1.0. The vulnerability is a cross-site scripting (XSS) flaw in carbon/resources/add_collection_ajaxprocessor.jsp, exploitable via the collectionName or parentPath parameters. Exploitation could cause injected scripts to run in a victim’...

CVE-2017-14651

WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/addcollectionajaxprocessor.jsp via the collectionName or parentPath parameter...

PT-2017-13612

Name of the Vulnerable Software and Affected Versions WSO2 Data Analytics Server version 3.1.0 Description The issue concerns a security problem where an attacker can inject malicious scripts. This is possible through the collectionName or parentPath parameter in the "carbon/resources/add...

CVE-2017-14651: Improper Neutralization of Input During Web Page Generation

WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/addcollectionajaxprocessor.jsp via the collectionName or parentPath parameter...

Multiple SAP Products 'DBISQL' Information Disclosure Vulnerability

SAP SQL Anywhere is a product of SAP, Germany.SQL Anywhere is an out-of-the-box database solution with enterprise-class features.SAP IQ is an analytics server designed for analytics, data warehousing, and business intelligence environments.SAP ASE is a database management platform. An information...

WSO2 Carbon Products Detection (HTTP)

HTTP based detection of WSO2 Carbon products. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2011-5322

GE Healthcare Centricity Analytics Server 1.1 has a default password of 1 V0yag3r for the SQL Server sa user, 2 G3car3s for the analyst user, 3 G3car3s for the ccg user, 4 V0yag3r for the viewer user, and 5 geservice for the geservice user in the Webmin interface, which has unspecified impact and...

Default credentials

GE Healthcare Centricity Analytics Server 1.1 has a default password of 1 V0yag3r for the SQL Server sa user, 2 G3car3s for the analyst user, 3 G3car3s for the ccg user, 4 V0yag3r for the viewer user, and 5 geservice for the geservice user in the Webmin interface, which has unspecified impact and...

CVE-2011-5322

GE Healthcare Centricity PACS-IW (Centricity PACS-IW) is vulnerable via default/hard-coded credentials documented for CVE-2011-5322 in Centricity Analytics Server 1.1, notably in the Webmin interface where several accounts use known passwords (e.g., V0yag3r, G3car3s, geservice). Exploitation coul...

PT-2015-3516

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity Analytics Server version 1.1 Description The issue concerns default passwords for various users in the GE Healthcare Centricity Analytics Server. Specifically, the default passwords are: V0yag3r for the SQL Server sa...

CVE-2011-5322: Undefined Security Weakness

GE Healthcare Centricity Analytics Server 1.1 has a default password of 1 V0yag3r for the SQL Server sa user, 2 G3car3s for the analyst user, 3 G3car3s for the ccg user, 4 V0yag3r for the viewer user, and 5 geservice for the geservice user in the Webmin interface, which has unspecified impact and...

TIBCO Spotfire Analytics Server Authentication Module Unspecified Information Disclosure

The remote host is running a version of TIBCO Spotfire Analytics Server that is affected by an information disclosure vulnerability due to an unspecified flaw in the Authentication Module. A remote attacker can exploit this vulnerability to access sensitive information by sending a specially...

TIBCO Spotfire Analytics Server Web Application Multiple Vulnerabilities

The remote host is running a version of TIBCO Spotfire Analytics Server that is affected by multiple vulnerabilities : - A cross-site scripting vulnerability exists that allows a remote attacker to view or modify sensitive information. CVE-2011-3132 - A session fixation vulnerability exists that...

CVE-2012-0690: Exposure of Sensitive Information to an Unauthorized Actor

TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analytics Server before 10.1.2; Server before 3.3.3; and Web Player, Automation Services, and Professional before 4.0.2 allow remote attackers to obtain sensitive...