CVE-2019-18947 information disclosure

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure...

PT-2021-9012

Name of the Vulnerable Software and Affected Versions Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 Description The issue is related to a privilege escalation vulnerability. There is no information provided about the estimated number of potentially affecte...

PT-2021-9013

Name of the Vulnerable Software and Affected Versions Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 Description The issue concerns session fixation. There is no information provided about the estimated number of potentially affected devices worldwide or...

PT-2021-9011

Name of the Vulnerable Software and Affected Versions Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 Description The issue is related to reflected XSS. There is no information provided about the estimated number of potentially affected devices worldwide or...

PT-2021-9014

Name of the Vulnerable Software and Affected Versions Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 Description The issue concerns information disclosure. There is no information provided about the estimated number of potentially affected devices worldwide...

CVE-2019-18947: Exposure of Sensitive Information to an Unauthorized Actor

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure...

CVE-2019-18946: Session Fixation

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation...

CVE-2019-18944: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS...

CVE-2019-18945: Undefined Security Weakness

Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability...

SDN Security Evaluation Framework: DELTA

DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique. Agent-Manager is the control tower. It takes full control over all...

tomcat: CSRF token leak

A CSRF flaw was found in Tomcat's the index pages for the Manager and Host Manager applications. These applications included a valid CSRF token when issuing a redirect as a result of an unauthenticated request to the root of the web application. This token could then be used by an attacker to...

tomcat: CSRF token leak

A CSRF flaw was found in Tomcat's the index pages for the Manager and Host Manager applications. These applications included a valid CSRF token when issuing a redirect as a result of an unauthenticated request to the root of the web application. This token could then be used by an attacker to...

Apache Tomcat 7.0.x < 7.0.68 / 8.0.x < 8.0.32 Multiple Vulnerabilities

Binary data 9313.prm...

tomcat: CSRF token leak

A CSRF flaw was found in Tomcat's the index pages for the Manager and Host Manager applications. These applications included a valid CSRF token when issuing a redirect as a result of an unauthenticated request to the root of the web application. This token could then be used by an attacker to...

tomcat: CSRF token leak

A CSRF flaw was found in Tomcat's the index pages for the Manager and Host Manager applications. These applications included a valid CSRF token when issuing a redirect as a result of an unauthenticated request to the root of the web application. This token could then be used by an attacker to...

Medium: tomcat8

Issue Overview: ResourceLinkFactory.setGlobalContext is a public method and was discovered to be accessible by web applications running under a security manager without any checks. This allowed a malicious web application to inject a malicious global context that could in turn be used to disrupt...

Apache Tomcat Manager Application Deployer Authenticated Code Execution

No description provided by source. $Id: tomcatmgrdeploy.rb 11330 2010-12-14 17:26:44Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Apache Tomcat 5.5.25 - CSRF Vulnerabilities

No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Apache Tomcat 5.5.25 CSRF Vulnerabilities Date : 10-24-2013 Author : Ivano Binetti http://ivanobinetti.com Author :...

Apache Tomcat Manager Code Execution Exploit

This Metasploit module can be used to execute a payload on Apache Tomcat servers that have an exposed "manager" application. The payload is uploaded as a WAR archive containing a jsp application using a POST request against the /manager/html/upload component. NOTE: The compatible payload sets var...

CVE-2013-6357

Cross-site request forgery CSRF vulnerability in the Manager application in Apache Tomcat 5.5.25 and earlier allows remote attackers to hijack the authentication of administrators for requests that manipulate application deployment via the POST method, as demonstrated by a...