CVE-2020-12082

A stored cross-site scripting issue impacts certain areas of the Web UI for Code Insight v7.x releases up to and including 2020 R1 7.11.0-64...

CVE-2020-12083

An elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x releases up to and including 2020 R1 7.11.0-64...

CVE-2020-12083

An elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x releases up to and including 2020 R1 7.11.0-64...

Code injection

An elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x releases up to and including 2020 R1 7.11.0-64...

Cross site scripting

A stored cross-site scripting issue impacts certain areas of the Web UI for Code Insight v7.x releases up to and including 2020 R1 7.11.0-64...

CVE-2020-12083

An elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x releases up to and including 2020 R1 7.11.0-64...

CVE-2020-12083

CVE-2020-12083 affects FlexNet Code Insight (Code Insight v7.x up to 7.11.0-64, 2020 R1). The root cause is an elevated privileges issue related to how Spring MVC calls/responses are handled, allowing an attacker to escalate privileges within the affected application. Public records describe the ...

CVE-2020-12082

A stored cross-site scripting issue impacts certain areas of the Web UI for Code Insight v7.x releases up to and including 2020 R1 7.11.0-64...

CVE-2020-12082

CVE-2020-12082 affects the Web UI of Code Insight v7.x up to 2020 R1 (7.11.0-64), with a stored cross-site scripting (XSS) flaw. The Red Hat/EUVD/NVD entries corroborate a stored XSS in the Code Insight web UI, arising from unvalidated user data in certain UI areas. The available sources do not p...

PT-2021-9439

Name of the Vulnerable Software and Affected Versions Code Insight versions 7.x up to and including 2020 R1 7.11.0-64 Description An elevated privileges issue related to Spring MVC calls impacts the software. Recommendations For Code Insight versions 7.x up to and including 2020 R1 7.11.0-64,...

CVE-2020-12083: Undefined Security Weakness

An elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x releases up to and including 2020 R1 7.11.0-64...

CVE-2020-12082: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting issue impacts certain areas of the Web UI for Code Insight v7.x releases up to and including 2020 R1 7.11.0-64...

Revenera FlexNet Code Insight Cross-Site Script Vulnerability

Revenera FlexNet Code Insight is a single integrated solution for open source license compliance and security from Revenera Germany. A cross-site scripting vulnerability exists in Code Insight, which arises from a web ui in certain areas of the product that does not validate user data. An attacke...

PT-2021-9438

Name of the Vulnerable Software and Affected Versions Code Insight versions 7.0.0 through 7.11.0-64 Description A stored cross-site scripting issue impacts certain areas of the Web UI. Recommendations For Code Insight versions 7.0.0 through 7.11.0-64, update to a version later than 7.11.0-64 to...

Revenera FlexNet Code Insight Authorization Issue Vulnerability

Revenera FlexNet Code Insight is a single integrated solution for open source license compliance and security from Revenera, Germany. An authorization issue vulnerability exists in Code Insight because the product does not effectively handle Spring MVC responses, which can be exploited to cause a...

Security Bulletin: Vulnerability in IBM Java SDK affects IBM InfoSphere Identity Insight (CVE-2020-14781)

Summary IBM InfoSphere Identity Insight 9.0 and 9.1 contain a version of Java with a low-impact vulnerability. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM InfoSphere Identity...

Security Bulletin: libXml2 used by IBM InfoSphere Identity Insight has a potential vulnerability (CVE-2021-3518)

Summary The libXml2 library used by Identity Insight has a potential use-after-free vulnerability that could be exploited by an attacker using a crafted input file. Vulnerability Details CVEID: CVE-2021-3518 DESCRIPTION: GNOME libxml2 could allow a remote attacker to execute arbitrary code on the...

Wiz goes (even more) global

The first half of 2021 has been incredible for Wiz. Fueled by an additional $250M in funding $350M total from Sequoia, Index Ventures, Insight, Salesforce, Blackstone, Advent, Greenoaks, and Aglaé Wiz has grown at a blistering pace, going from 25 employees at the start of the year to 120 today...

Active Exploitation of Confluence Server & Confluence Data Center: CVE-2021-26084

This attack is ongoing. See the Updates section at the end of this post for new information as it comes to light. On August 25, 2021, Atlassian published details on CVE-2021-26084, a critical remote code execution vulnerability in Confluence Server and Confluence Data Center. The vulnerability...

insight-egypt.com Cross Site Scripting vulnerability OBB-2131478

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...