GHSA-Q4XQ-445G-G6CH Keycloak allows cross-site scripting (XSS)

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items Resource and Permissions from the admin console, leading to a stored cross-site scripting XSS attack...

CVE-2024-4028

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items Resource and Permissions from the admin console, leading to a stored cross-site scripting XSS attack...

CVE-2024-4028

CVE-2024-4028 affects Keycloak. The issue allows a privileged attacker to supply a malicious payload as a permission during admin-console item (Resource/Permissions) creation, resulting in stored XSS. Description and related entries consistently describe this XSS path; exploitation details are no...

CVE-2024-4028 Keycloak-core: stored xss in keycloak when creating a items in admin console

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items Resource and Permissions from the admin console, leading to a stored cross-site scripting XSS attack...

CVE-2024-4028 Keycloak-core: stored xss in keycloak when creating a items in admin console

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items Resource and Permissions from the admin console, leading to a stored cross-site scripting XSS attack...

Security Bulletin: Vulnerability in expact library (CVE-2024-50602) affects Power HMC.

Summary The expat library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-50602 DESCRIPTION: An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser function because XMLStopParser ca...

Security Bulletin: Vulnerability in Apache Tomcat Server (CVE-2024-52318) affects Power HMC.

Summary The Apache Tomcat Server is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-52318 DESCRIPTION: Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31,...

Security Bulletin: Vulnerabilities in IBM Java SDK (CVE-2024-21217, CVE-2024-21208, CVE-2024-10917) affect Power HMC.

Summary The IBM Java SDK library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-21217 DESCRIPTION: Vulnerability in Java SE component: Serialization. Difficult to exploit vulnerability allows unauthenticated attacker...

NetScaler Console and NetScaler Agent Security Bulletin for CVE-2024-12284

Description of Problem A vulnerability has been discovered in NetScaler Console formerly NetScaler ADM and NetScaler Agent. Refer to below for further details: Affected Versions The following supported versions of NetScaler Console and NetScaler Agent are affected: NetScaler Console 14.1 BEFORE...

PT-2025-6673 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: KeyCloak affected versions not specified Description: A issue was found in KeyCloak that may allow a privileged attacker to use a malicious payload as the permission while creating items from the admin console, leading to a stored cross-site...

PT-2025-6517 · Citrix · Netscaler Console +1

Name of the Vulnerable Software and Affected Versions: NetScaler Console versions 13.1 through 13.1-56.18 NetScaler Console versions 14.1 through 14.1-38.53 NetScaler Agent versions 13.1 through 13.1-56.18 NetScaler Agent versions 14.1 through 14.1-38.53 Description: The issue is related to...

CVE-2025-21103

Dell NetWorker Management Console, versions 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contains an improper neutralization of server-side vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability and run arbitrary code on the server...

CVE-2025-21103

Dell NetWorker Management Console, versions 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contains an improper neutralization of server-side vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability and run arbitrary code on the server...

PT-2025-6923 · Dell · Dell Networker Management Console

Name of the Vulnerable Software and Affected Versions: Dell NetWorker Management Console versions 19.11 through 19.11.0.3 Dell NetWorker Management Console versions prior to 19.10.0.7 Description: The issue concerns an improper neutralization of server-side vulnerability in the Dell NetWorker...

Dell NetWorker Management Console 安全漏洞

Dell NetWorker Management Console is a backup and recovery software from Dell USA. A security vulnerability exists in Dell NetWorker Management Console, which arises from the mishandling of a server-side vulnerability that can be exploited by an attacker to run arbitrary code...

CVE-2024-56477

IBM Power Hardware Management Console V10.3.1050.0 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2024-56477

IBM Power Hardware Management Console (Power HMC) v10.3.1050.0 is affected by CVE-2024-56477, a path traversal (CWE-22) vulnerability where an authenticated user can view arbitrary files by sending a crafted URL containing /../. Affects HMC V10.3.1050.0; impact is high on confidentiality with no ...

CVE-2024-56477 IBM Power Hardware Management Console directory traversal

IBM Power Hardware Management Console V10.3.1050.0 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

IBM Power Hardware Management Console 路径遍历漏洞

The IBM Power Hardware Management Console HMC is a suite of graphical interface software from International Business Machines IBM for configuring and managing the Power System family of servers. The software is primarily used to manage hardware such as servers. A path traversal vulnerability exis...

PT-2025-6726 · Ibm · Ibm Hardware Management Console

Name of the Vulnerable Software and Affected Versions: IBM Power Hardware Management Console version 10.3.1050.0 Description: The issue allows an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to...