Cross site scripting

Cross-site scripting XSS vulnerability in the Create Catalogue feature in Hybris Management Console HMC in SAP Hybris before 5.2.0.13, 5.3.x before 5.3.0.11, 5.4.x before 5.4.0.11, 5.5.0.x before 5.5.0.10, 5.5.1.x before 5.5.1.11, 5.6.x before 5.6.0.11, and 5.7.x before 5.7.0.15 allows remote...

CVE-2016-6858

CVE-2016-6858 is a cross-site scripting (XSS) vulnerability in the SAP Hybris Management Console (HMC) Create Employee feature. The issue affects SAP Hybris releases listed as vulnerable (e.g., 5.0.4.11, 5.1.0.x before 5.1.0.11, 5.1.1.x before 5.1.1.12, 5.2.0.x and 5.3.0.x before 5.3.0.10, 5.4.x ...

CVE-2016-6859

CVE-2016-6859 concerns SAP Hybris’ Hybris Management Console (HMC) prior to version 6.0. An information disclosure vulnerability allows remote attackers to trigger an error and read a Java stack trace, potentially exposing sensitive information. Affected component is the HMC within SAP Hybris; ro...

CVE-2016-6857

The CVE-2016-6857 entry documents a Cross-site scripting (XSS) vulnerability in the SAP Hybris Management Console (HMC) Create Catalogue feature. Affected products are SAP Hybris/HMC versions prior to 5.2.0.13, 5.3.x prior to 5.3.0.11, 5.4.x prior to 5.4.0.11, 5.5.0.x prior to 5.5.0.10, 5.5.1.x p...

CVE-2016-6856

CVE-2016-6856 describes a cross-site scripting (XSS) vulnerability in the Inbox Search feature of the SAP Hybris Hybris Management Console (HMC) prior to version 6.0. The issue allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter. The provided connected so...

CVE-2016-6856: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Inbox Search feature in Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter...

CVE-2016-6859: Exposure of Sensitive Information to an Unauthorized Actor

Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java stack trace...

PT-2016-7150

Name of the Vulnerable Software and Affected Versions SAP Hybris versions prior to 6.0 Description The issue allows remote attackers to obtain sensitive information by triggering an error and then reading a Java stack trace in the Hybris Management Console HMC of SAP Hybris. Recommendations For...

python-zhmcclient

zhmcclient - A pure Python client library for the IBM Z HMC We...

CVE-2016-0230

IBM Power Hardware Management Console HMC 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors...

CVE-2016-0230

IBM Power Hardware Management Console HMC 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors...

CVE-2016-0230

CVE-2016-0230 concerns IBM Power Hardware Management Console (HMC) releases: 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0. The vulnerability allows physically proximate attackers to obtain root ...

CVE-2016-0230: Undefined Security Weakness

IBM Power Hardware Management Console HMC 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8.3.0 SP2, 8.4 through 8.4.0 SP1, and 8.5.0 allows physically proximate attackers to obtain root access via unspecified vectors...

Oracle Java SE CVE-2015-2590 Remote Security Vulnerability

Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'Libraries' sub-component. This vulnerability affects the following supported versions: Java SE 6u95, Java SE 7u80, Java SE 8u45, Java SE...

CVE-2015-0137

IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console HMC certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate...

Code injection

IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console HMC certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate...

CVE-2015-0137

IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 fail to validate HMC certificates at login, enabling MITM via crafted certificates to spoof devices. Affected: IBM PowerVC PowerVC Management Console certificate validation during pre-login. Root cause: inadequate certificate va...

IBM PowerVC Standard Man-in-the-Middle Attack Vulnerability

IBM PowerVC is a suite of virtualization management solutions from IBM USA. The solution supports virtual system management, virtual image management and deployment, and virtual workload management. A security vulnerability exists in IBM PowerVC versions 1.2.0.0 to 1.2.0.3 and 1.2.1.0 to 1.2.1.2,...

CVE-2015-0137: Improper Input Validation

IBM PowerVC Standard 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 validates Hardware Management Console HMC certificates only during the pre-login stage, which allows man-in-the-middle attackers to spoof devices via a crafted certificate...

RHEL 5 : cman (RHSA-2009:1341)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1341 advisory. The Cluster Manager cman utility provides services for managing a Linux cluster. Multiple insecure temporary file use flaws were found in...