CVE-2018-1836

IBM WebSphere MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1.0.0, and 9.1.0.1 console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

The vulnerability of the Login component of the Farmagonzora Oracle Argus Safety platform allows a intruder to gain unauthorized access to protected data.

The vulnerability of the Console component of the Oracle Argus Safety pharmaceutical monitoring platform is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protoco...

The vulnerability of the Console component of the Oracle Argus Safety software platform allows a intruder to gain unauthorized access to protected data.

The vulnerability of the Console component of the Oracle Argus Safety software platform is related to security mechanism failures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

CVE-2018-3142

Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion subcomponent: EAS Console. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Hyperion Essbase...

Apache TomEE console cross-site scripting vulnerability

Apache TomEE is the United States Apache Apache Software Foundation of a Java EE server . Apache TomEE console tomee-webapp is one of the console program . A cross-site scripting vulnerability exists in Apache TomEE console tomee-webapp. A remote attacker can exploit this vulnerability to execute...

CVE-2018-11636

Cross-site request forgery CSRF vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to execute malicious and unauthorized actions...

Puppet Enterprise Console Cross-Site Scripting Vulnerability (CNVD-2018-09253)

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is its enterprise version.Puppet Enterprise Console is one of t...

CVE-2018-6511

A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when using the Puppet Enterprise Console. Affected releases are Puppet Puppet Enterprise: 2017.3.x versions prior to 2017.3.6...

The vulnerability in the web console of the Kaspersky Secure Mail Gateway security tool, which allows access to the root user rights.

The vulnerability of the Kaspersky Secure Mail Gateway web console relates to deficiencies in the process of eliminating special elements from the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain root user privilege...

CVE-2018-1342

A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console...

CVE-2018-2675

Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

VMware AirWatch Console Cross-Site Scripting Vulnerability

VMware AirWatch is an enterprise mobility management solution from VMware. VMware AirWatch Console is one of the console applications.A cross-site scripting vulnerability exists in VMware AirWatch Console version 9.x prior to 9.2.0. A remote attacker could exploit the vulnerability to redirect...

CVE-2017-12158

It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource locations. An attacker could use this flaw against an authenticated user to attain reflected XSS via a malicious server...

Denial of service

A vulnerability in the web console of the Cisco Cloud Services Platform CSP 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines VMs operating remotely on an affected CSP device. The vulnerability is due to weaknesses in the generation o...

Cisco Cloud Services Platform Unauthorized Access Vulnerability

Cloud Services Platform 2100 is a unified and optimized x86 software and hardware platform for virtualizing data center network functions. The Cisco Cloud Services Platform CSP 2100 operates with a security vulnerability in the implementation of the Web console that could allow an authenticated,...

Red Hat JBoss A-MQ JBoss console arbitrary code execution vulnerability

Red Hat JBoss A-MQ is the United States Red Hat Red Hat company's open source messaging platform. The platform is used to integrate applications , endpoints and devices , and provides a variety of messaging models to support real-time messaging . JBoss console is one of the controller . An...

Puppet Enterprise console remote code execution vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is an enterprise version. console is one of the console tools. ...

Unspecified Vulnerability in Oracle Fusion Middleware WebLogic Server Component (CNVD-2016-02578)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebLogic Server is an application server component for both cloud and traditional environments. An unspecified vulnerability in the Console...

CVE-2016-0700

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675...

CVE-2016-0675

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0700...