CVE-2017-1593

IBM DOORS Next Generation DNG/RRC 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-1560

IBM DOORS Next Generation DNG/RRC 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-1688

IBM DOORS Next Generation DNG/RRC 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134063...

CVE-2017-1678

IBM DOORS Next Generation DNG/RRC 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-1560

IBM DOORS Next Generation (DNG/RRC) versions 4.0, 5.0 and 6.0 are affected by a cross-site scripting (XSS) vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The issue is documented across ...

CVE-2017-1650

This CVE applies to IBM DOORS Next Generation (DNG/RRC) 6.0 and its 6.0.x releases, where a cross-site scripting flaw in the Web UI could let an attacker inject arbitrary JavaScript and potentially disclose credentials in a trusted session. The root cause is improper input validation in the Web U...

CVE-2017-1678

CVE-2017-1678 affects IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0; the vulnerability is a cross-site scripting flaw in the Web UI that can lead to credentials disclosure within a trusted session. Remediation is available by upgrading to fixed builds: 6.0.2 iFix014 or later, 6.0.3 iFix00...

CVE-2017-1461

IBM DOORS Next Generation (DNG/RRC) versions 4.0–6.0 are vulnerable to cross-site scripting in the Web UI, enabling an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The issue affects Rational DOORS Next Generation 6.0–6.0.4, Rational Requir...

CVE-2017-1607

IBM DOORS Next Generation DNG/RRC 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132927...

CVE-2017-1689

IBM DOORS Next Generation DNG/RRC 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134064...

IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability (CNVD-2017-37833)

IBM Rational DOORS Next Generation DNG and Rational Requirements Composer RRC are both requirements management solutions from IBM USA. The solutions are primarily used to define, manage, and report on requirements throughout the project lifecycle. A cross-site scripting vulnerability exists in IB...

IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability (CNVD-2017-37834)

IBM Rational DOORS Next Generation DNG and Rational Requirements Composer RRC are both requirements management solutions from IBM USA. The solutions are primarily used to define, manage, and report on requirements throughout the project lifecycle. A cross-site scripting vulnerability exists in IB...

IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability (CNVD-2017-37831)

IBM Rational DOORS Next Generation DNG and Rational Requirements Composer RRC are both requirements management solutions from IBM USA. The solutions are primarily used to define, manage, and report on requirements throughout the project lifecycle. A cross-site scripting vulnerability exists in IB...

IBM Rational DOORS Next Generation Cross-Site Scripting Vulnerability (CNVD-2017-37832)

IBM Rational DOORS Next Generation DNG and Rational Requirements Composer RRC are both requirements management solutions from IBM USA. The solutions are primarily used to define, manage, and report on requirements throughout the project lifecycle. A cross-site scripting vulnerability exists in IB...

Design/Logic Flaw

A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that could allow an unauthenticated, remote attacker to send traffic to the local IP address of the device, bypassing any filters that are configured to...

CVE-2017-12299

A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that could allow an unauthenticated, remote attacker to send traffic to the local IP address of the device, bypassing any filters that are configured to...

CVE-2017-12299

The CVE-2017-12299 entry describes a vulnerability in Cisco ASA Next-Generation Firewall Services where the process of creating default IP blocks during device initialization can allow an unauthenticated, remote attacker to reach the device’s local IP address and bypass filters that are supposed ...

How Next-Generation Firewall Platforms Help Protect Your Perimeter at Each Stage of the Cyber Kill Chain*

Whether you need to upgrade your firewalls on-premise or in the cloud, next-generation firewalls NGFWs can significantly reduce the risks associated with the modern threat landscape. Since attacks have evolved using techniques such as encryption, polymorphism, etc., firewalls have also evolved to...

Command Injection Vulnerability in Multiple Cisco Products

Cisco Unified Computing System UCS Manager is a set of embedded device management software. Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Cisco Firepower 9300 Security Appliance are firewall devices. Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Cisco Firepower 930...

Command Injection Vulnerability in Multiple Cisco Products

The Cisco Firepower 4100 Series Next-Generation Firewall NGFW and the Cisco Firepower 9300 Security Appliance are security appliances from Cisco.Smart Licensing Smart Licensing Manager service is one of the license smart management service. A command injection vulnerability exists in the Smart...