Lucene search
+L

19060 matches found

NVD
NVD
added 2023/09/27 7:15 p.m.31 views

CVE-2023-4523

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm...

9.4CVSS9.2AI score0.0034EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/27 7:15 p.m.28 views

Cross site scripting

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm...

5.8CVSS6.1AI score0.0034EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/27 6:8 p.m.6 views

CVE-2023-4523 Real Time Automation 460 Series Cross-site Scripting

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm...

9.4CVSS6.6AI score0.0034EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/09/27 6:8 p.m.35 views

CVE-2023-4523 Real Time Automation 460 Series Cross-site Scripting

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm...

9.4CVSS9.3AI score0.0034EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/27 6:8 p.m.72 views

CVE-2023-4523

CVE-2023-4523 affects Real Time Automation 460 Series with versions before v8.9.8. The vulnerability is cross-site scripting via the URL string, enabling an attacker to execute JavaScript and causing the gateway’s HTTP interface to redirect to index.htm. According to NVD, CVSS v3.1 base score is ...

9.4CVSS7.5AI score0.0034EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/09/27 3:19 p.m.7 views

CVE-2023-43775

Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe...

5.3CVSS5.8AI score0.00667EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/27 3:19 p.m.26 views

Denial of service

Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe...

5CVSS5.2AI score0.00667EPSS
SaveExploits0References1Affected Software4
CNNVD
CNNVD
added 2023/09/27 12:0 a.m.10 views

Real Time Automation Cross-Site Scripting Vulnerability

Real Time Automation 460 Series is a series of gateways from Real Time Automation, Inc. A cross-site scripting vulnerability exists in Real Time Automation 460 Series versions prior to v8.9.8 that stems from an improper neutralization of input during 1 web page generation, allowing an attacker to...

9.4CVSS6.1AI score0.0034EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/09/27 12:0 a.m.15 views

PT-2023-29465 · Real Time Automation · Real Time Automation 460 Series

Name of the Vulnerable Software and Affected Versions: Real Time Automation 460 Series products versions prior to 8.9.8 Description: The issue allows an attacker to run any JavaScript reference from the URL string, which could lead to a cross-site scripting attack. If this occurs, the gateway's...

9.4CVSS6.9AI score0.0034EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/09/26 1:50 p.m.48 views

CVE-2023-43775 Security issue in SMP Gateway automation platform

Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe...

4.7CVSS5.5AI score0.00667EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/26 1:50 p.m.62 views

CVE-2023-43775

CVE-2023-43775 affects Eaton SMP Gateway web server (SG-4260). The vulnerability can cause a Denial-of-Service leading to an unexpected restart of the automation platform; in rare cases, restarts may occur in Safe Mode or Max Safe Mode, after which the device is reportedly not vulnerable in Max S...

5.3CVSS4.9AI score0.00667EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/26 1:50 p.m.20 views

CVE-2023-43775 Security issue in SMP Gateway automation platform

Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe...

4.7CVSS6.8AI score0.00667EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/09/26 8:26 a.m.73 views

Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor

Summary IBM Business Automation Workflow Configuration Editor is vulnerable to multiple attacks. Vulnerability Details CVEID:CVE-2023-32005 DESCRIPTION: Node.js could allow a remote attacker to obtain sensitive information, caused by the failure to restrict file stats through the fs.statfs API in...

9.8CVSS8.3AI score0.03906EPSS
SaveExploits4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.12 views

The vulnerability of the IBM Robotic Process Automation software, related to security configuration errors, allows a perpetrator to alter the cluster configuration.

The vulnerability of the IBM Robotic Process Automation software lies in security configuration errors. Exploiting this vulnerability could allow an attacker to alter the cluster configuration...

5.5CVSS5.9AI score0.00174EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/09/26 12:0 a.m.9 views

Red Hat Ansible Automation Security Vulnerability

Red Hat Ansible Automation is a software application from Red Hat, Inc. It provides a means to automate all aspects of an infrastructure, from servers and network devices to operating systems, applications, and security. A security vulnerability exists in Red Hat Ansible Automation Hub, which ste...

6.5CVSS7.1AI score0.00834EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.9 views

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data, allowing attackers to gain access to protected information.

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

4.3CVSS5.5AI score0.00443EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.11 views

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data, allowing attackers to gain access to protected information.

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

4.3CVSS5.5AI score0.00418EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.12 views

The vulnerability of the IBM Robotic Process Automation software lies in the lack of protection for operational data, which allows attackers to disclose protected information.

The vulnerability of the IBM Robotic Process Automation software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

5.3CVSS5.9AI score0.00509EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.9 views

The vulnerability of the IBM Robotic Process Automation software, related to security configuration errors, allows attackers to exploit their privileges.

The vulnerability of the IBM Robotic Process Automation software lies in security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.2AI score0.00156EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.9 views

The vulnerability of the software interface of the IBM Robotic Process Automation software, related to authentication errors, allows a perpetrator to disclose sensitive information about the vulnerable system.

The vulnerability of the software interface of the IBM Robotic Process Automation tooling lies in authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information about the vulnerable system...

6.8CVSS6.5AI score0.0049EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder