PT-2017-13415

Name of the Vulnerable Software and Affected Versions HP ArcSight ESM versions prior to 6.9.1c Patch 4 HP ArcSight ESM versions prior to 6.11.0 Patch 1 HP ArcSight ESM Express versions prior to 6.9.1c Patch 4 HP ArcSight ESM Express versions prior to 6.11.0 Patch 1 Description A Reflected and...

CVE-2017-14357: Improper Neutralization of Input During Web Page Generation

A Reflected and Stored Cross-Site Scripting XSS vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1. This vulnerability could be exploited remotely to allow Reflected and Stored Cross-Site Scripting XSS...

PT-2017-13414

Name of the Vulnerable Software and Affected Versions HP ArcSight ESM versions prior to 6.9.1c Patch 4 HP ArcSight ESM versions prior to 6.11.0 Patch 1 HP ArcSight ESM Express versions prior to 6.9.1c Patch 4 HP ArcSight ESM Express versions prior to 6.11.0 Patch 1 Description The issue is an SQL...

PT-2017-13416

Name of the Vulnerable Software and Affected Versions HP ArcSight ESM versions prior to 6.9.1c Patch 4 HP ArcSight ESM versions prior to 6.11.0 Patch 1 HP ArcSight ESM Express versions prior to 6.9.1c Patch 4 HP ArcSight ESM Express versions prior to 6.11.0 Patch 1 Description A URL redirection t...

Cisco Unified Contact Center Express Cross-Site Scripting Vulnerability (CNVD-2017-32117)

Cisco Unified Contact Center Express Unified CCX is a customer relationship management component of a unified communications solution from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in the web-based management interface in Cisco Unified CCX, which arises from the...

Juniper Junos DoS Vulnerability (JSA10821)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in the express path feature that could cause the flowd process to crash. TRUSTED...

CVE-2017-12288

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to insufficient validation of user-supplied inp...

CVE-2017-12288

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to insufficient validation of user-supplied inp...

CVE-2017-12288

The CVE-2017-12288 entry describes a cross-site scripting (XSS) flaw in the web-based management interface of Cisco Unified Contact Center Express (UCCE). The root cause is insufficient validation of user-supplied input in the interface, allowing an unauthenticated, remote attacker to lure a user...

CVE-2017-12288

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to insufficient validation of user-supplied inp...

CVE-2017-12288: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to insufficient validation of user-supplied inp...

PT-2017-12462

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user ...

Cisco Unified Contact Center Express Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to insufficient validation of user-supplied inp...

sushiexpress.com.sg XSS vulnerability

Open Bug Bounty ID: OBB-340914 Description| Value ---|--- Affected Website:| sushiexpress.com.sg Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Denial of service

When Express Path formerly known as service offloading is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availability cluster configuration mode, certain multicast packets might cause the flowd process to crash, halting or interrupting traffic from...

CVE-2017-10619 Junos: SRX cluster denial of service vulnerability in flowd due to multicast packets

When Express Path formerly known as service offloading is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availability cluster configuration mode, certain multicast packets might cause the flowd process to crash, halting or interrupting traffic from...

Veeam ONE: SQL Express Maximum Database Size Limitation

Challenge When the Veeam ONE database is located in a SQL Express instance, if the database reaches the maximum allowed size, Veeam ONE will not be able to continue data collection, thus affecting data accuracy and alarm generation. Cause If you choose to host the Veeam ONE database on Microsoft...

HP ArcSight Enterprise Security Manager and Enterprise Security Manager Express Access Control Error Vulnerability

HP ArcSight ESM Enterprise Security Manager and ESM Express are both enterprise security management software with event correlation and security analysis capabilities from Hewlett Packard Enterprise HPE. The software collects, correlates and reports on enterprise-wide security events in real time...

HP ArcSight Enterprise Security Manager and ArcSight Enterprise Security Manager Express Information Disclosure Vulnerability

HP ArcSight ESM Enterprise Security Manager and ESM Express are both enterprise security management software with event correlation and security analysis capabilities from Hewlett Packard Enterprise HPE. The software collects, correlates and reports on enterprise-wide security events in real time...

HP ArcSight Enterprise Security Manager and ArcSight Enterprise Security Manager Express Access Control Error Vulnerability

HP ArcSight ESM Enterprise Security Manager and ESM Express are both enterprise security management software with event correlation and security analysis capabilities from Hewlett Packard Enterprise HPE. The software collects, correlates and reports on enterprise-wide security events in real time...