AxiomSL Axiom Google Web Toolkit module security vulnerability (CNVD-2019-42884)

AxiomSL is a financial institution that provides a corporate strength platform and relevant industry expertise to address key regulatory and risk requirements. A security vulnerability exists in the AxiomSL Axiom java applet module version 9.5.3 and earlier. No detailed vulnerability details are...

AxiomSL Axiom java applet module security vulnerability

AxiomSL is a financial institution that provides a corporate strength platform and relevant industry expertise to address key regulatory and risk requirements. A security vulnerability exists in the AxiomSL Axiom java applet module version 9.5.3 and earlier. No detailed vulnerability details are...

Session fixation

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack...

CVE-2015-5462

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to inject HTML into the scoping dashboard features...

CVE-2015-5384

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack...

CVE-2015-5384

CVE-2015-5384 affects AxiomSL’s Axiom Google Web Toolkit module up to version 9.5.3 and earlier, which is vulnerable to a Session Fixation attack. The connected CNVD entry confirms the affected version but provides no additional vulnerability details or remediation in the provided documents.

CVE-2015-5384

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack...

CVE-2015-5463

AxiomSL's Axiom java applet module used for editing uploaded Excel files and associated Java RMI services 9.5.3 and earlier allows remote attackers to 1 access data of other basic users through arbitrary SQL commands, 2 perform a horizontal and vertical privilege escalation, 3 cause a Denial of...

Sql injection

AxiomSL's Axiom java applet module used for editing uploaded Excel files and associated Java RMI services 9.5.3 and earlier allows remote attackers to 1 access data of other basic users through arbitrary SQL commands, 2 perform a horizontal and vertical privilege escalation, 3 cause a Denial of...

CVE-2015-5462

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to inject HTML into the scoping dashboard features...

CVE-2015-5462

CVE-2015-5462 affects AxiomSL’s Axiom Google Web Toolkit module (versions 9.5.3 and earlier). The root cause is an HTML injection vulnerability in the scoping dashboard features, allowing remote attackers to inject HTML. The issue is exploitable over the network without authentication (per CVSS v...

CVE-2015-5463

AxiomSL's Axiom java applet module used for editing uploaded Excel files and associated Java RMI services 9.5.3 and earlier allows remote attackers to 1 access data of other basic users through arbitrary SQL commands, 2 perform a horizontal and vertical privilege escalation, 3 cause a Denial of...

CVE-2015-5463

CVE-2015-5463 affects AxiomSL’s Axiom java applet module (used for editing uploaded Excel files and related Java RMI services) version 9.5.3 and earlier. The connected documents corroborate multiple dangerous impacts: remote attackers can (1) access data of other basic users via arbitrary SQL com...