CVE-2023-47295

A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands via injecting a crafted payload into any text field that accepts strings...

CVE-2023-47294

An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie...

CVE-2023-47297

A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing system security auditing configurations...

PT-2025-26610 · Ncr · Ncr Terminal Handler

Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: The issue allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie. Recommendations: For NCR Terminal Handler...

PT-2025-26635 · Ncr · Ncr Terminal Handler

Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: An issue in NCR Terminal Handler allows a remote attacker to execute arbitrary code and obtain sensitive information via a GET request to a "UserService" SOAP API endpoint to validate if a user...

PT-2025-26608 · Ncr · Ncr Terminal Handler

Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: A settings manipulation issue allows attackers to execute arbitrary commands, including editing system security auditing configurations. Recommendations: For NCR Terminal Handler version 1.5.1,...

PT-2025-26611 · Ncr · Ncr Terminal Handler

Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: A CSV injection issue allows attackers to execute arbitrary commands by injecting a crafted payload into any text field that accepts strings. Recommendations: For NCR Terminal Handler version...

CVE-2023-47031

An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to escalate privileges via a crafted POST request to the grantRolesToUsers, grantRolesToGroups, and grantRolesToOrganization SOAP API component...

CVE-2023-47029

An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted POST request to the UserService component...

PT-2025-26616 · Ncr · Ncr Terminal Handler

Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the "UserService SOAP API" function. Recommendations: For NCR Terminal Handler version 1.5.1, consider...

CVE-2023-47298

CVE-2023-47298 affects NCR Terminal Handler 1.5.1. The issue is broken access control on the SOAP API endpoint, allowing a low-privilege authenticated user to query and obtain information about all application users, including usernames, roles, security groups, and account statuses. Public refere...

CVE-2023-47032

CVE-2023-47032 affects NCR Terminal Handler v1.5.1. The issue arises from mishandling crafted scripts sent to the UserService SOAP API function, enabling remote code execution. In the CVE records, the impact is rated high/critical (CVSS 3.1: 9.8) with network access, no privileges required, no us...

CVE-2023-47032

Password Vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the UserService SOAP API function...

CVE-2023-47294

CVE-2023-47294 affects NCR Terminal Handler v1.5.1. A crafted session cookie can allow a low-privileged authenticated attacker to arbitrarily deactivate, lock, or delete user accounts. Root cause cited across sources relates to insufficient session cookie validation. Impact is user-account manipu...

CVE-2023-47297

A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing system security auditing configurations...

CVE-2023-47029

CVE-2023-47029 affects NCR Terminal Handler v1.5.1. Multiple sources confirm a remote attacker can execute arbitrary code and access sensitive information by sending a crafted POST request to the UserService component. CVSS v3.1 base score 9.8 (Critical), with network attack vector and no privile...

CVE-2023-47297

CVE-2023-47297: A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 permits an attacker to execute arbitrary commands, including editing system security auditing configurations. CVSS v3.1 base score 9.8 (Network, Low complexity, No user interaction, Privileges=None; Impact: Confi...

CVE-2023-47031

An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to escalate privileges via a crafted POST request to the grantRolesToUsers, grantRolesToGroups, and grantRolesToOrganization SOAP API component...

CVE-2023-47298

An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses...

PT-2025-26629 · Ncr · Ncr Terminal Handler

Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: The issue allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted POST request to the "UserService" component. Recommendations: For NCR Terminal Handler...