59 matches found
EUVD-2010-2146
Malware in sbrugna...
ARIS: Business Process Management 10.0.21.0 Cross Site Scripting
Exploit Title: Stored Cross-Site Scripting XSS in ARIS: Business Process Management Edition Version 10.0.21.0 Exploit Author: Seid Yassin Date: 2024-03-28 Vendor: Software AG Software Link: https://aris.com/ Version: ARIS: Business Process Management Description: Discovered a file upload feature...
ARIS controller XSS
The vulnerability of the built-in software of the ARIS controller is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to carry out an XSS attack...
ARIS controller Buffer Overflow DoS
The vulnerability of the built-in software of the ARIS controller is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to perform a service failure through a specially crafted request...
ARIS controller Authentication Failure DoS
The vulnerability of the built-in software of the ARIS controller is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted network packet...
ARIS controller Unrestricted File Download Code Execution
The vulnerability of the built-in software of the ARIS controller is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
ARIS controller Cryptographic Defects Info Disclosure
The vulnerability of the built-in software of the ARIS controller is related to the use of cryptographic algorithms that contain defects and risks. Exploiting this vulnerability could allow a malicious actor to gain access to critical information...
ARIS controller File Upload Code Execution
The vulnerability of the built-in software of the ARIS controller is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...
ARIS controller Information Disclosure
The vulnerability of the built-in software of the ARIS controller relates to the exposure of confidential information. Exploiting this vulnerability could allow a remote attacker to gain access to critical information...
ARIS controller Resource Exhaustion DoS
The vulnerability of the built-in software of the ARIS controller is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by loading a specially crafted file...
ARIS controller Auth Bypass
The vulnerability of the ARIS controller’s built-in software is related to insufficient protection of authentication data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain user authentication data from the web interface...
ARIS controller XSS
The vulnerability of the built-in software of the ARIS controller is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to carry out an XSS attack...
ARIS controller Auth Bypass RCE
The vulnerability of the built-in software of the ARIS controller is related to deficiencies in the authentication process, allowing a perpetrator to execute arbitrary code using a specially crafted request...
ARIS controller Resource Exhaustion DoS
The vulnerability of the built-in software of the ARIS controller is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending a specially crafted network packet...
ARIS controller Privilege Escalation
The vulnerability of the built-in software of the ARIS controller is related to access control errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges within the system...
PT-2021-7790
Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to a buffer overflow in memory due to reading data beyond buffer boundaries. It can be exploited by a remote attacker using a specially crafted...
PT-2021-7791
Name of the Vulnerable Software and Affected Versions ARIS controller software affected versions not specified Description The issue is related to authentication errors in the ARIS controller's embedded software. It can be exploited by a remote attacker to cause a denial of service by sending a...
PT-2021-7802
Name of the Vulnerable Software and Affected Versions ARIS controller software affected versions not specified Description The issue is related to the disclosure of confidential information in the ARIS controller's embedded software. It allows a remote attacker to gain access to critical...
PT-2021-7801
Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to the lack of protection for the web page structure, allowing a remote attacker to exploit it and potentially conduct a cross-site scripting XS...
PT-2021-7796
Name of the Vulnerable Software and Affected Versions ARIS controller embedded software affected versions not specified Description The issue is related to an unlimited file upload vulnerability in the ARIS controller's embedded software, allowing a remote attacker to execute arbitrary code using...