Remote file inclusion

Local File Inclusion vulnerability in Ab Initio ControlCenter before 4.0.2.6 allows remote attackers to retrieve arbitrary files. Fixed in v4.0.2.6 and v4.0.3.1...

CVE-2021-33408

CVE-2021-33408 affects Ab Initio Control Center before 4.0.2.6, describing a Local File Inclusion vulnerability that enables remote retrieval of arbitrary files. The root cause is an LFI condition in the Control Center component prior to the fixed versions. Impact is the ability to access sensiti...

CVE-2021-33408

Local File Inclusion vulnerability in Ab Initio ControlCenter before 4.0.2.6 allows remote attackers to retrieve arbitrary files. Fixed in v4.0.2.6 and v4.0.3.1...

CVE-2021-33408: Cleartext Transmission of Sensitive Information

Local File Inclusion vulnerability in Ab Initio ControlCenter before 4.0.2.6 allows remote attackers to retrieve arbitrary files. Fixed in v4.0.2.6 and v4.0.3.1...

CVE-2021-20528

IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198761...

CVE-2021-20529

IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 198763...

CVE-2021-20528

IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198761...

CVE-2021-20529

IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 198763...

Information disclosure

IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 198763...

Cross site scripting

IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198761...

CVE-2021-20529

IBM Sterling Control Center (IBM Control Center) vulnerability CVE-2021-20529: information disclosure in version 6.2.0.0 that could reveal sensitive version data, enabling further targeted attacks. CVSS v3.1/3.0 scores ~5.3 (MEDIUM). Remediation: apply iFix08 for 6.2.0.0. Other documents corrobor...

CVE-2021-20529

IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 198763...

CVE-2021-20528

IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198761...

CVE-2021-20528

CVE-2021-20528 affects IBM Control Center 6.2.0.0. The issue is a cross-site scripting vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Remediation provided by IBM is iFix08 for 6.2.0.0;...

CVE-2021-20529: Undefined Security Weakness

IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 198763...

CVE-2021-20528: Improper Neutralization of Input During Web Page Generation

IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198761...

IBM Sterling Control Center Cross-Site Scripting Vulnerability (CNVD-2021-36550)

IBM Sterling Control Center is an application system from IBM in the United States. A centralized monitoring and management system. A cross-site scripting vulnerability exists in IBM Sterling Control Center that allows a user to embed arbitrary JavaScript code in the Web UI to change the intended...

IBM Sterling Control Center Information Disclosure Vulnerability

IBM Sterling Control Center is an application system from IBM in the United States. A centralized monitoring and management system. An information disclosure vulnerability exists in IBM Sterling Control Center, which stems from a vulnerability that could allow a user to obtain sensitive version...

Security Bulletin: Cross-Site Scripting Vulnerability Affects IBM Sterling Control Center (CVE-2021-20528)

Summary IBM Sterling Control Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerability Details CVEID:...

Security Bulletin: General Information Vulnerability Affects IBM Control Center (CVE-2021-20529)

Summary IBM Sterling Control Center could allow a user to obtain sensitive version information that could be used in further attacks against the system. Vulnerability Details CVEID: CVE-2021-20529 DESCRIPTION: IBM Sterling Control Center could allow a user to obtain sensitive version information...