CVE-2018-6589

CA Spectrum 10.1 prior to 10.01.02.PTF10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2018-6589

CA Spectrum 10.1 prior to 10.01.02.PTF10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2018-6589

CA Spectrum vulnerability CVE-2018-6589 affects CA Spectrum 10.1 prior to 10.01.02.PTF_10.1.239 and 10.2.x prior to 10.2.3. The issue allows remote attackers to cause a denial of service via unspecified vectors. The connected sources specify remediation: upgrade to CA Spectrum 10.01.02.PTF_10.1.2...

CVE-2018-6589: Improper Input Validation

CA Spectrum 10.1 prior to 10.01.02.PTF10.1.239 and 10.2.x prior to 10.2.3 allows remote attackers to cause a denial of service via unspecified vectors...

PT-2018-17653 · Ca · Ca Spectrum

Name of the Vulnerable Software and Affected Versions: CA Spectrum versions prior to 10.01.02.PTF 10.1.239 CA Spectrum version 10.2.x prior to 10.2.3 Description: The issue allows remote attackers to cause a denial of service via unspecified vectors. Recommendations: For CA Spectrum versions prio...

SA165: NTP Vulnerabilities February 2018

SUMMARY Symantec Network Protection products using affected versions of the NTP reference implementation from ntp.org are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to execute arbitrary code, modify the target's system time, prevent the target fro...

Denial Of Service (DoS)

libkrb5.so is vulnerable to denial of service DoS through buffer overflow attacks. The vulnerability exists in the getmatchingdata function of krb5 that includes certauth plugin, and subsequently allowing both the CA certificate and the user's certificate to have long subjects, causing a denial o...

CVE-2018-8953

CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request...

CVE-2018-8954

CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request...

CVE-2018-8954

CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request...

Cross site request forgery (csrf)

CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request...

Sql injection

CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request...

CVE-2018-8954

CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request...

CVE-2018-8953

CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request...

CVE-2018-8954

CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request...

CVE-2018-8954

CA Workload Control Center (GUI for CA Workload Automation AE) is affected prior to r11.4 SP6. A remote attacker can execute arbitrary code via a specially crafted HTTP request, as described across multiple sources (CNVD/CVELIST/NVD entries). Root cause is an arbitrary code execution flaw in the ...

CVE-2018-8953

CA Workload Automation AE is vulnerable to SQL injection via a crafted HTTP request when running versions prior to r11.3.6 SP7. The issue is documented by the CVE-2018-8953 entry and corroborated by multiple connected sources (NVD/CNVD references), which indicate remote attacker access without us...

CVE-2018-8953

CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request...

CVE-2018-8954: Improper Input Validation

CA Workload Control Center before r11.4 SP6 allows remote attackers to execute arbitrary code via a crafted HTTP request...

CVE-2018-8953: Improper Neutralization of Special Elements used in an SQL Command

CA Workload Automation AE before r11.3.6 SP7 allows remote attackers to a perform SQL injection via a crafted HTTP request...