CVE-2022-43531

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-43522

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

CVE-2022-43520

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the Aruba EdgeConnect Enterprise Orchestrator instance. An attacker could exploit these vulnerabilities...

PT-2023-14242 · Aruba · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager versions 6.9.12 and below ClearPass Policy Manager versions 6.10.7 and below Description: The issue concerns the web-based management interface of ClearPass Policy Manager, where an authenticated remote attacker could...

Mendix Workflow Commons 访问控制错误漏洞

Siemens Mendix Workflow Commons Module provides out-of-the-box content to help you get started building workflows in Mendix.A security vulnerability exists in Siemens Mendix Workflow Commons Module due to a failure of the affected module version to properly handle access control for certain modul...

Vulnerabilities fixed in Mattermost Server

Two vulnerabilities have been fixed in Mattermost Server. The vulnerabilities allow an authenticated remote malicious person able to perform a denial-of-service attack by crashing the server crashing the server. To do this, the malicious party must send multiple prepared requests to the server...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2022-85418)

IBM InfoSphere Information Server is a data integration platform from International Business Machines IBM. IBM InfoSphere Information Server versions 8.1, 8.5 and 8.7 contain an information disclosure vulnerability that stems from a program that does not properly restrict directories. An...

Six Apart Movable Type 代码注入漏洞

Six Apart Movable Type is an application from Six Apart USA. It provides features such as multiple users, comments, trackbacks, and threads. A security vulnerability exists in Six Apart Movable Type, which can be exploited to execute arbitrary Perl scripts and/or arbitrary operating system comman...

PT-2022-5726 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to conduct cross-site scripting attacks against other users of the...

CVE-2022-20834

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. These vulnerabilities are due t...

CVE-2022-42786

Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage...

CVE-2022-42786

CVE-2022-42786 concerns the Wiesemann & Theis ComServer Series web interface. The vulnerability is an XSS flaw in the configuration webpage title, allowing an authenticated remote attacker to inject and execute arbitrary web scripts/HTML. The root cause is described in a few sources as an imprope...

CVE-2022-42786 Wiesemann & Theis: XSS vulnerability in web interface of the Com-Server family

Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage...

PT-2022-5693 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an authenticated, remote attack...

PT-2022-5691 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an authenticated, remote attack...

Cisco Firepower Management Center 代码问题漏洞

Cisco Firepower Management Center FMC is the next generation firewall management center software from Cisco. A code issue vulnerability exists in Cisco Firepower Management Center FMC Software, which stems from insufficient XML syntax validation in the module import function of its management...

PT-2022-5701 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an authenticated, remote attack...

CVE-2022-43439

A vulnerability has been identified in POWER METER SICAM Q100 7KG9501-0AA01-0AA1 All versions V2.50, POWER METER SICAM Q100 7KG9501-0AA01-2AA1 All versions V2.50, POWER METER SICAM Q100 7KG9501-0AA31-0AA1 All versions V2.50, POWER METER SICAM Q100 7KG9501-0AA31-2AA1 All versions V2.50, SICAM P850...

Cisco Identity Services Engine 路径遍历漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users, and devices, and develops and enforces policies to monitor the network. A path traversal vulnerability exists in Cisco...

Cisco Umbrella 跨站脚本漏洞

Cisco Umbrella is a suite of cloud security platforms from Cisco. The platform prevents cyber threats such as phishing, malware and ransomware. Cisco Umbrella suffers from a cross-site scripting vulnerability that originates from unprocessed user input, which could allow an authenticated, remote...