CVE-2012-4028

Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication...

Authentication flaw

Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication...

Directory traversal

Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demonstrated by reading the config.bog file...

CVE-2012-4028

Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication...

CVE-2012-4027

Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demonstrated by reading the config.bog file...

CVE-2012-4027

CVE-2012-4027 concerns a directory traversal in the Tridium Niagara AX Framework . The vulnerability allows remote attackers to read files outside the intended images, nav, and px folders by exploiting incorrect permissions, with examples showing access to a file like config.bog . The connected s...

CVE-2012-4028

CVE-2012-4028 affects the Tridium Niagara AX Framework. The vulnerability stems from improper storage of credential data, enabling context-dependent attackers to bypass authentication by using stored credentials. The NVD entry lists a high impact with network reach and low attack complexity, but ...

CVE-2012-4028: Insufficiently Protected Credentials

Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication...

CVE-2012-4027: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demonstrated by reading the config.bog file...

MS12-040: Vulnerability in Microsoft Dynamics AX Enterprise Portal Could Allow Elevation of Privilege (MSSQL check)

Binary data ms12-040mssql.nbin...

Microsoft Dynamics AX Installed

Microsoft Dynamics AX, an ERP solution, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59453; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/02/01"; scriptnameenglish:"Microsoft Dynamics AX...

MS12-040: Vulnerability in Microsoft Dynamics AX Enterprise Portal Could Allow Elevation of Privilege (2709100)

The version of Microsoft Dynamics AX Enterprise Portal on the remote host has an unspecified cross-site scripting vulnerability. An attacker could exploit this by tricking a user into making a malicious request, resulting in arbitrary script code execution. This plugin checks if the system is...

Microsoft Dynamics AX crossite scripting

Crossite scripting via URLs...

Cross site scripting

Cross-site scripting XSS vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Dynamics AX Enterprise Portal XSS Vulnerability."...

CVE-2012-1857

CVE-2012-1857 describes a cross-site scripting (XSS) vulnerability in the Enterprise Portal component of Microsoft Dynamics AX 2012. An attacker could craft a URL to cause arbitrary script/HTML execution in a victim’s browser. Affected product: Dynamics AX 2012 Enterprise Portal; vulnerability tr...

CVE-2012-1857

Cross-site scripting XSS vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Dynamics AX Enterprise Portal XSS Vulnerability."...

Microsoft Dynamic AX Enterprise Portal Cross Site Scripting Vulnerability

Description Microsoft Dynamic AX is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

Microsoft Dynamic AX Enterprise Portal Cross-site Scripting (MS12-040; CVE-2012-1857)

A cross-site scripting vulnerability has been reported in Microsoft Dynamics AX Enterprise Portal...

PT-2012-3600

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics AX 2012 affected versions not specified Description A cross-site scripting XSS issue exists in the Enterprise Portal component, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2012-1857: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Dynamics AX Enterprise Portal XSS Vulnerability."...