CVE-2021-26097

An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6 may allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTT...

CVE-2021-26097

An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6 may allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTT...

CVE-2021-26097: Improper Neutralization of Special Elements used in an OS Command

An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4, and 3.0.0 through 3.0.6 may allow an authenticated attacker with access to the web GUI to execute unauthorized code or commands via specifically crafted HTT...

PT-2021-7462

Name of the Vulnerable Software and Affected Versions FortiManager and FortiAnalyser GUI versions 7.0.0, 6.4.5 and below, 6.2.7 and below, 6.0.11 and below, 5.6.11 and below Description A server-side request forgery SSRF vulnerability may allow a remote and authenticated attacker to access...

Fortinet FortiPortal cross-site scripting vulnerability

Fortinet FortiPortal is an advanced, feature-rich managed security analysis and management support tool for Fortinet's FortiGate, FortiWiFi, and FortiAP product lines, available as a virtual machine for MSPs. A cross-site scripting vulnerability exists in the Fortinet FortiPortal GUI due to...

OESA-2021-1295 kf5-kconfig security update

KDE Frameworks 5 Tier 1 addon with advanced configuration system made of two parts: KConfigCore and KConfigGui. Security Fixes: In KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to code execution with minimal user interaction. This relates to...

IBM Tivoli Netcool/OMNIbus Web GUI Storage Based Cross-Site Scripting Vulnerability

IBM Tivoli Netcool/OMNIbus is a service-level management SLM system that provides real-time, centralized monitoring of complex networks and IT domains. web GUI is a web-based application version of the system that displays event data from multiple data sources in a variety of graphical formats in...

IBM Tivoli Netcool/OMNIbus Web GUI Cross-Site Scripting Vulnerability (CNVD-2021-57448)

IBM Tivoli Netcool/OMNIbus is a service level management SLM system that provides real-time, centralized monitoring of complex networks and IT domains. web GUI is the web-based application version of the system that displays event data from multiple data sources in a variety of graphical formats ...

IBM Tivoli Netcool/OMNIbus Web GUI Cross-Site Scripting Vulnerability (CNVD-2021-57447)

IBM Tivoli Netcool/OMNIbus is a service level management SLM system that provides real-time, centralized monitoring of complex networks and IT domains. web GUI is a web-based version of the application that displays event data from multiple data sources in a variety of graphical formats in...

IBM Tivoli Netcool/OMNIbus Web GUI Storage Based Cross-Site Scripting Vulnerability (CNVD-2022-05122)

IBM Tivoli Netcool/OMNIbus is a service-level management SLM system that provides real-time, centralized monitoring of complex networks and IT domains. web GUI is a web-based application version of the system that displays event data from multiple data sources in a variety of graphical formats in...

CVE-2021-29805

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 20426...

CVE-2021-29804

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 20426...

CVE-2021-29822

CVE-2021-29822 affects IBM Tivoli Netcool/OMNIbus_WebGUI 8.1.0 (WebGUI) where a cross-site scripting (XSS) vulnerability exists in the web UI. The IBM Security Bulletin confirms this family of vulnerabilities and provides a remediation path: apply Fix Pack 23 for WebGUI 8.1.0 (IJ32887). This mode...

CVE-2021-29805

CVE-2021-29805 affects IBM Tivoli Netcool/OMNIbus_GUI 8.1.0. The IBM Security Bulletin indicates the WebGUI is vulnerable to a stored cross-site scripting (XSS) flaw in the 8.1.0 WebUI, allowing an attacker to embed arbitrary JavaScript in the Web UI and potentially disclose credentials within a ...

CVE-2021-29804

CVE-2021-29804 affects IBM Tivoli Netcool/OMNIbus_GUI 8.1.0. The IBM WebGUI is vulnerable to stored cross-site scripting, allowing an attacker to inject JavaScript in the Web UI, potentially leading to credentials disclosure in a trusted session. Public documents include a remediation: apply Fix ...

CVE-2021-29803

CVE-2021-29803 affects IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 WebGUI, vulnerable to stored cross-site scripting (XSS) that can allow embedding arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. The IBM security bulletin for this family (CVE-2021-29803,...

CVE-2021-29803

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 20416...

PT-2021-18504

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool/OMNIbus GUI version 8.1.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2021-18487

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool/OMNIbus GUI version 8.1.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted session...

PT-2021-18485

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool/OMNIbus GUI version 8.1.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...