PT-2023-30848 · Pegasystems · Pega Platform

Name of the Vulnerable Software and Affected Versions: Pega Platform versions 7.1 to 8.8.3 Description: The issue is an HTML Injection problem with a name field used in Visual Business Director. This field can only be modified by an authenticated administrative user. Recommendations: For Pega...

Pegasystem PEGA Platform Cross-Site Scripting Vulnerability

Pegasystem PEGA Platform is a suite of application development platforms from the US-based Pegasystem. The platform is used to develop applications such as BPM Business Process Management, Case Management, Real-Time Decision Making, and CRM Customer Relationship Management. A security vulnerabili...

Veeam Backup & Replication support for VMware Cloud Director

Purpose This article provides information about compatibility between VMware Cloud Director and Veeam Backup & Replication. Solution The table below provides VMware Cloud Director compatibility information for the most recent version of Veeam Backup & Replication. Older VMware Cloud Director/vClo...

Citrix Director throws “Unexpected Server Error” while clicking on the Trends Tab

Citrix Director throws “Unexpected Server Error” while clicking on the Trends Tab Event ID 5 is logged in Citrix Director, pointing to failure while connecting to data source. The CDF Traces captured from Director Server, show the exception "Unexpected character encountered while parsing value" D...

"Connection Interrupted" error message will pop up when trigger disconnect from director or studio

• "Connection Interrupted"error message will pop up when admin user trigger disconnect from director or studio • If user directly click disconnect from toolbar or × ， issue won’t happen • Issue only happen for random users , not all users have this issue...

Delivery Controller showing offline in Citrix Director

Newly added delivery controller shows as offline in Citrix Director...

VMware Cloud Director 10.5 Partial Compatibility Patch

Intended Audience This hotfix is intended for customers who upgraded to VMware Cloud Director 10.5 and found that backup operations were impacted. Customers who have not yet upgraded to VMware Cloud Director 10.5 are advised to wait for full Cloud Director 10.5 support, which will be available in...

Citrix Director Message: "Cannot Retrieve Data". Error: Data source cannot be found.

Delivery Controller error: The description for Event ID 5 from source Citrix Director Service cannot be found.Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. On...

Sessions not logging out after enabling Shellbridge

Seamless sessions might not log off gracefully and leave sessions to be active in Citrix Studio or Citrix Director when using Citrix Virtual Apps and Desktops 2212 or later including Citrix Apps and Desktops 2402 LTSR. Starting with Citrix Virtual Apps and Desktops 2212 the Windows startup...

Cisco Nexus and Cisco Multilayer Director Switches MOTD Telnet Login Reset (CVE-2015-0775)

The banner aka MOTD implementation in Cisco NX-OS 4.12E11f on Nexus 4000 devices, 5.21SV32.1 on Nexus 1000V devices, 6.02N22 on Nexus 5000 devices, 6.211 on MDS 9000 devices, 6.212 on Nexus 7000 devices, 7.03 on Nexus 9000 devices, and 7.20ZN99.67 on Nexus 3000 devices allows remote attackers to...

Cisco NX-OS Software Python Parser Escape (CVE-2017-12301)

A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and gain unauthorized access to the underlying operating system of the device. The vulnerability exists due to insufficient sanitization of...

Few Fortune 100 Firms List Security Pros in Their Executive Ranks

Many things have changed since 2018, such as the names of the companies in the Fortune 100 list. But one aspect of that vaunted list that hasnt shifted much since is that very few of these companies list any security professionals within their top executive ranks. The next time you receive a brea...

Vulnerabilities fixed in Oracle Communications

Vulnerabilities have been fixed in Oracle Communications products. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can result in the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code executio...

Why businesses need a disinformation defense plan, with Lisa Kaplan: Lock and Code S04E13

When you think about the word "cyberthreat," what first comes to mind? Is it ransomware? Is it spyware? Maybe it's any collection of the infamous viruses, worms, Trojans, and botnets that have crippled countless companies throughout modern history. In the future, though, what many businesses migh...

golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters

A flaw was found in the golang package, where requests forwarded by reverse proxy include the raw query parameters from the inbound request, including unparseable parameters rejected by net/http. This issue could permit query parameter smuggling when a Go proxy forwards a parameter with an...

The vulnerability in the web interface of the Cisco Industrial Network Director software allows a perpetrator to gain unauthorized access to information.

The vulnerability of the Cisco Industrial Network Director software’s web interface is related to errors in the use of standard permissions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to sensitive information...

Cisco Releases Security Advisories for Multiple Products

Cisco has released security updates for vulnerabilities affecting Industrial Network Director IND, Modeling Labs, StarOS Software, and BroadbandWorks Network Server. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and...

Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

Cisco and VMware have released security updates to address critical security flaws in their products that could be exploited by malicious actors to execute arbitrary code on affected systems. The most severe of the vulnerabilities is a command injection flaw in Cisco Industrial Network Director...

The vulnerability in the web interface of the Cisco Industrial Network Director software package allows a hacker to execute arbitrary commands.

The vulnerability of the Cisco Industrial Network Director software’s web interface exists due to the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Cisco Industrial Network Director Vulnerabilities

Multiple vulnerabilities in Cisco Industrial Network Director IND could allow an authenticated attacker to inject arbitrary operating system commands or access sensitive data. For more information about these vulnerabilities, see the Details "details" section of this advisory. Cisco has released...