CVE-2013-5443: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-5444: Undefined Security Weakness

The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors...

IBM Cognos Express跨站请求伪造漏洞

Bugtraq ID:66357 CVE ID:CVE-2013-5443 IBM Cognos Express是一款为满足中型企业的需求而构建的商业智能和计划集成解决方案。 IBM Cognos Express存在一个跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 0 IBM Cognos Express 10.2.1 IBM Cognos Express 10.1 IBM Cognos Express 9.5 IBM Cognos Express 9.0 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：：...

PT-2014-2927

Name of the Vulnerable Software and Affected Versions IBM Cognos Express versions 9.0 before IFIX 2 IBM Cognos Express versions 9.5 before IFIX 2 IBM Cognos Express versions 10.1 before IFIX 2 IBM Cognos Express versions 10.2.1 before FP1 Description A cross-site request forgery CSRF issue allows...

CVE-2013-5445: Undefined Security Weakness

IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key...

PT-2014-2929

Name of the Vulnerable Software and Affected Versions IBM Cognos Express versions 9.0 before IFIX 2 IBM Cognos Express versions 9.5 before IFIX 2 IBM Cognos Express versions 10.1 before IFIX 2 IBM Cognos Express versions 10.2.1 before FP1 Description The issue allows local users to obtain sensiti...

IBM Cognos Express敏感信息泄漏漏洞

Bugtraq ID:66361 CVE ID:CVE-2013-5445 IBM Cognos Express是一款为满足中型企业的需求而构建的商业智能和计划集成解决方案。 IBM Cognos Express存在未明安全漏洞，远程攻击者可以利用漏洞获取服务器上的加密验证凭据。 0 IBM Cognos Express 10.2.1 IBM Cognos Express 10.1 IBM Cognos Express 9.5 IBM Cognos Express 9.0 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：...

PT-2014-2928

Name of the Vulnerable Software and Affected Versions IBM Cognos Express versions 9.0 before IFIX 2 IBM Cognos Express versions 9.5 before IFIX 2 IBM Cognos Express versions 10.1 before IFIX 2 IBM Cognos Express version 10.2.1 before FP1 Description The issue allows remote attackers to read...

IBM Cognos Express本地信息泄漏漏洞

Bugtraq ID:66362 CVE ID:CVE-2013-5444 IBM Cognos Express是一款为满足中型企业的需求而构建的商业智能和计划集成解决方案。 IBM Cognos Express使用静态密钥进行加密，可帮助攻击者对不能访问的敏感信息进行解密。 0 IBM Cognos Express 10.2.1 IBM Cognos Express 10.1 IBM Cognos Express 9.5 IBM Cognos Express 9.0 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：...

Cisco Unified Contact Center Express Serviceability Page CSRF Vulnerability

A vulnerability in the Cisco Unified Serviceability component of Cisco Unified Contact Center Express Cisco Unified CCX could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could...

Cisco Unified Contact Center Express DRS Sensitive Information Disclosure Vulnerability

A vulnerability in the disaster recovery system DRS of Cisco Unified Contact Center Express Cisco Unified CCX could allow an authenticated, remote attacker to acquire sensitive information about DRS-related devices. The vulnerability is due to extraneous information included in the web page. An...

Cisco Unified Contact Center Express CCMConfig Sensitive Information Disclosure Vulnerability

A vulnerability in the CCMConfig page of Cisco Unified Contact Center Express Cisco Unified CCX could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to the presence of sensitive information in the CCMConfig page. An attacker could exploit this...

CVE-2014-0745

Cross-site request forgery CSRF vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express Unified CCX allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCum95502...

CVE-2014-0746

The disaster recovery system DRS in Cisco Unified Contact Center Express Unified CCX allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCum95536...

CVE-2014-2102

Cisco Unified Contact Center Express Unified CCX does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575...

CVE-2014-0746

The disaster recovery system DRS in Cisco Unified Contact Center Express Unified CCX allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCum95536...

CVE-2014-0745

Cross-site request forgery CSRF vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express Unified CCX allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCum95502...

CVE-2014-2102

Cisco Unified Contact Center Express (Unified CCX) CCMConfig page contains sensitive information that can be accessed by an authenticated, remote attacker. The issue arises from improper content restriction on CCMConfig, enabling information disclosure. Cisco advisories state no software updates ...

CVE-2014-0746

CVE-2014-0746 affects Cisco Unified Contact Center Express (Unified CCX) Disaster Recovery System (DRS). The issue is an information disclosure: extraneous fields on a DRS web page allow an authenticated, remote attacker to obtain sensitive device information. Root cause is inclusion of sensitive...

PT-2014-4484

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express Unified CCX affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information by examining the content of the CCMConfig page, due to improper restrictio...