CVE-2019-18331

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain access to path and filenames on the server by sending specifically crafted packets to 1099/tcp. Please note that an attacke...

CVE-2019-18317

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from...

CVE-2019-18316

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain remote code execution by sending specifically crafted packets to 1099/tcp. Please note that an attacker needs to have netwo...

CVE-2019-18320

CVE-2019-18320 affects Siemens SPPA-T3000 Application Server (all versions prior to Service Pack R8.2 SP2). The vulnerability allows an attacker with network access to upload arbitrary files without authentication. Public exploits are not indicated in the provided documents; however, exploitation...

CVE-2019-18318

CVE-2019-18318 affects SPPA-T3000 Application Server (all versions

CVE-2019-18314

CVE-2019-18314 affects Siemens SPPA-T3000 Application Server (all versions prior to Service Pack R8.2 SP2). A remote attacker with network access can achieve remote code execution by sending specially crafted objects via RMI. Red Hat, NVD, and CVE lists corroborate the RCE via AdminService expose...

CVE-2019-18317

CVE-2019-18317 relates to the SPPA-T3000 Application Server. All versions prior to Service Pack R8.2 SP2 are affected. The root issue is that an attacker who can access the server over the network can cause a Denial-of-Service by sending specially crafted objects via RMI. The Red Hat CVE entries ...

CVE-2019-18331

CVE-2019-18331 affects Siemens SPPA-T3000 Application Server (all versions prior to Service Pack R8.2 SP2). The issue allows an unauthenticated attacker with network access to read path and filenames on the server by sending crafted packets to 1099/tcp. The vulnerability is classified as informat...

CVE-2019-18283

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The AdminService is available without authentication on the Application Server. An attacker can gain remote code execution by sending specifically crafted objects to one of its functions. Plea...

CVE-2019-18288

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with valid authentication at the RMI interface could be able to gain remote code execution through an unsecured file upload. Please note that an attacker needs to have access to th...

CVE-2019-18284

CVE-2019-18284 affects Siemens SPPA-T3000 Application Server (all versions before Service Pack R8.2 SP2). The AdminService is accessible without authentication, allowing an attacker to obtain password hashes and change passwords, requiring access to the Application Highway to exploit. Public expl...

CVE-2019-18286

CVE-2019-18286 affects the SPPA-T3000 Application Server (all versions

CVE-2019-18287

CVE-2019-18287 affects the SPPA-T3000 Application Server (all versions

CVE-2019-18285

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The RMI communication between the client and the Application Server is unencrypted. An attacker with access to the communication channel can read credentials of a valid user. Please note that ...

CVE-2019-18286

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18287. Please note that an attacker needs to have...

CVE-2019-7004

A Cross-Site Scripting XSS vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially disclose sensitive information. All product versions 11.x are affected. Product versions prior to 11.0, including unsupported versions, were not...

CVE-2019-7004

A Cross-Site Scripting XSS vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially disclose sensitive information. All product versions 11.x are affected. Product versions prior to 11.0, including unsupported versions, were not...

Cross site scripting

A Cross-Site Scripting XSS vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially disclose sensitive information. All product versions 11.x are affected. Product versions prior to 11.0, including unsupported versions, were not...

PT-2019-15337

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from...

PT-2019-15339

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from...