Numerix License Server 安全漏洞

Numerix License Server is a license server from Numerix, Inc. A security vulnerability exists in Numerix License Server version 1.1596, which originates from a user clicking on a malicious link or visiting an attacker-controlled Web site can be infected with arbitrary JavaScript running in the...

The vulnerability of the software for managing software product licenses in HPE AutoPass License Server lies in the lack of protective measures for the SQL query structure, allowing attackers to access confidential information.

The vulnerability of the software for managing HPE AutoPass License Server products is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to access confidential information...

The vulnerability of the software for managing software product licenses in HPE AutoPass License Server lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the software for managing HPE AutoPass License Server products is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the software for managing software product licenses in HPE AutoPass License Server lies in the authentication procedures’ deficiencies, which allow a perpetrator to bypass the authentication process.

The vulnerability of the software for managing HPE AutoPass License Server products is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process remotely...

The vulnerability of the software for managing software product licenses in HPE AutoPass License Server arises from incorrect restrictions on XML links to external objects. This allows a perpetrator to access confidential information.

The vulnerability of the software for managing HPE AutoPass License Server product licenses is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to access confidential information...

Hewlett Packard Enterprise AutoPass License Server SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 58...

Hewlett Packard Enterprise AutoPass License Server XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 58...

Hewlett Packard Enterprise AutoPass License Server Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Hewlett Packard Enterprise AutoPass License Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 5814 by...

Hewlett Packard Enterprise AutoPass License Server hsqldb Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise AutoPass License Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific fl...

PT-2024-9118 · Hewlett Packard · Hpe Autopass License Server

Name of the Vulnerable Software and Affected Versions: Hewlett Packard Enterprise AutoPass License Server versions prior to 9.17 Description: An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server APLS. The vulnerability is due to insufficient input validation...

PT-2024-9119 · Hewlett Packard · Hpe Autopass License Server

Name of the Vulnerable Software and Affected Versions: Hewlett Packard Enterprise AutoPass License Server affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the HPE AutoPass License Server software. This allows a remote attacker to...

PT-2024-9117 · Hewlett Packard · Hpe Autopass License Server

Name of the Vulnerable Software and Affected Versions: HPE AutoPass License Server affected versions not specified Description: The issue is related to a lack of protection against SQL query structure exploitation in the HPE AutoPass License Server software, which can lead to information...

PT-2024-9116 · Hewlett Packard · Hpe Autopass License Server

Name of the Vulnerable Software and Affected Versions: HPE AutoPass License Server affected versions not specified Description: The issue is related to incorrect restriction of XML links to external objects in the HPE AutoPass License Server software. Exploitation of this issue may allow an...

The vulnerability of the Ivanti Velocity License Server for mobile devices lies in its lack of access control mechanisms, which allows attackers to increase their privileges.

The vulnerability of the Ivanti Velocity License Server for mobile devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-9167

Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-9167

CVE-2024-9167 concerns Ivanti Velocity License Server prior to version 5.2, where insecure file/permission handling allows a locally authenticated attacker to escalate privileges. The underlying issue is insecure permissions that fail to enforce proper access controls, enabling a LOCAL, LOW-COMPL...

CVE-2024-9167

Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation...

Security Advisory Velocity License Server (CVE-2024-9167)

Summary Ivanti has released updates for the Velocity License Server which addresses a high-severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...

Ivanti Velocity License Server 安全漏洞

Ivanti Velocity License Server is an application from Ivanti USA that provides licenses to mobile devices using Velocity or terminal emulation clients. A security vulnerability exists in Ivanti Velocity License Server versions prior to 5.2, which stems from the presence of insecure privileges tha...

"Check for Available Renewals" may show error banner "citrixservices.citrix.com is unreachable"

When user clicks "Check for Available Renewals" button in Citrix License Server Console, error banner "citrixservices.citrix.com is unreachable. The server might be offline or there might be Internet, Proxy, or Firewall issues. " may appear. Actually, the affected license server is able to reach...