Siemens 7KT PAC1200 Data Manager

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: 7KT PAC1200 data manager Vulnerability: Authentication Bypass Using an Alternate Path or Channel AFFECTED PRODUCTS Siemens reports that the vulnerability affects the following versions of the 7KT...

CVE-2017-1249

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

SIEMENS SIMATIC Logon Certification Bypass Vulnerability

SIMATIC WinCC, SIMATIC PCS 7, SIMATIC PDM and SIMATIC IT are industrial automation products from Siemens. An authentication bypass vulnerability exists in SIEMENS SIMATIC Logon. An attacker can exploit the vulnerability to bypass the authentication mechanism and perform unauthorized operations...

My Data Manager - Data Usage - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application My Data Manager - Data Usage published at the 'play' market has multiple vulnerabilities...

CVE-2015-6468

Cross-site request forgery CSRF vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-6468

Cross-site request forgery CSRF vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-6468

CVE-2015-6468 is a CSRF vulnerability in Resource Data Management’s Web-based Data Manager, affected versions prior to 2.2. The issue enables an attacker to hijack an authenticated user’s session and perform unintended actions on trusted pages via CSRF vectors (details not specified in the provid...

CVE-2015-6470

Resource Data Management’s Data Manager prior to version 2.2 is affected by a privilege-escalation vulnerability (CWE-269) that allows a valid authenticated user to change passwords for other users, including administrators, via unspecified vectors. Public records indicate remote access and passw...

PT-2015-7258

Name of the Vulnerable Software and Affected Versions Resource Data Management Data Manager versions prior to 2.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified. Recommendation...

PT-2015-7260

Name of the Vulnerable Software and Affected Versions Resource Data Management Data Manager versions prior to 2.2 Description The issue allows remote authenticated users to modify arbitrary passwords. Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue...

CVE-2015-6468: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-6470: Undefined Security Weakness

Resource Data Management Data Manager before 2.2 allows remote authenticated users to modify arbitrary passwords via unspecified vectors...

Resource Data Management Privilege Escalation Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified two vulnerabilities in Resource Data Management’s Data Manager application. Resource Data Management has produced a new version to mitigate these vulnerabilities. These vulnerabilities could be exploited remotely. AFFECTED PRODUCTS Resourc...

(0Day) F5 Data Manager discoverFilerBasicInfo.jsft filerName SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of F5 Data Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the discoverFilerBasicInfo.jsft page. An attacker is able to inject SQL through the...

F5 Networks ARX Data Manager Web Interface Detection

Binary data f5datamanagerdetect.nbin...

F5 Networks ARX Data Manager Unsupported Version Detection

The remote host is running F5 Networks ARX Data Manager. According to the vendor, this product is no longer supported and security fixes will not be released. As a result, it is likely to contain security vulnerabilities. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc';...

Sql injection

SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-2949

SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-2949

CVE-2014-2949 is a SQL injection vulnerability in F5 ARX Data Manager 3.0.0–3.1.0 web service. The issue allows an authenticated user to inject SQL and, per sources, may enable remote code execution on vulnerable installations. Affected product is ARX Data Manager (3.x) with web service exposed; ...