Lucene search
+L

8863 matches found

OSV
OSV
added 2023/12/13 12:00 a.m.27 views

CVE-2023-47325

Silverpeas Core 6.3.1 administrative "Bin" feature is affected by broken access control. A user with low privileges is able to navigate directly to the bin, revealing all deleted spaces. The user can then restore or permanently delete the spaces...

5.4CVSS5.5AI score
SaveExploits0References3
OSV
OSV
added 2023/12/12 10:15 a.m.11 views

CVE-2023-4932

SAS application is vulnerable to Reflected Cross-Site Scripting XSS. Improper input validation in the program parameter of the the /SASStoredProcess/do endpoint allows arbitrary JavaScript to be executed when specially crafted URL is opened by an authenticated user. The attack is possible from a...

5.4CVSS5.8AI score0.00632EPSS
SaveExploits0References3
OSV
OSV
added 2023/12/12 2:15 a.m.14 views

CVE-2023-49578

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application...

3.5CVSS5.7AI score0.0027EPSS
SaveExploits0References2
Prion
Prion
added 2023/12/12 2:15 a.m.30 views

Design/Logic Flaw

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application...

2.7CVSS7AI score0.0027EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/12/12 1:08 a.m.52 views

CVE-2023-49578

CVE-2023-49578 concerns SAP Cloud Connector 2.0. An authenticated, low-privilege user can trigger a Denial of Service from adjacent UI by sending a crafted malicious request, resulting in low availability impact and no effect on confidentiality or integrity. Several connected sources describe thi...

3.5CVSS3.9AI score0.0027EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/12 1:08 a.m.15 views

CVE-2023-49578 Denial of service (DOS) in SAP Cloud Connector

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application...

3.5CVSS6.8AI score0.0027EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/12/12 1:08 a.m.43 views

CVE-2023-49578 Denial of service (DOS) in SAP Cloud Connector

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious request which leads to low impact on the availability and no impact on confidentiality or Integrity of the application...

3.5CVSS4.4AI score0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.8 views

PT-2023-7715 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This...

5.5CVSS5AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.8 views

PT-2023-7809 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.8AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.8 views

PT-2023-7839 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This...

5.5CVSS4.5AI score0.00597EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.8 views

PT-2023-7719 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This...

5.5CVSS4.7AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.9 views

PT-2023-7732 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.7AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.6 views

PT-2023-7792 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.8AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.8 views

PT-2023-7738 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.8AI score0.00597EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.9 views

PT-2023-7713 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability. It could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.7AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.10 views

PT-2023-7812 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.8AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.9 views

PT-2023-7815 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.5CVSS4.8AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.16 views

PT-2023-7722 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This...

5.5CVSS4.5AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.8 views

PT-2023-7727 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This...

5.5CVSS5AI score0.00597EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/12 12:00 a.m.8 views

PT-2023-7813 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form...

5.4CVSS4.5AI score0.00597EPSS
SaveExploits0References6
Rows per page
Query Builder