Lucene search
+L

425 matches found

Cvelist
Cvelist
•added 2023/12/05 7:35 a.m.•44 views

CVE-2023-6269 Argument injection vulnerability in Atos Unify OpenScape Session Border Controller, Atos Unify OpenScape Branch and Atos Unify OpenScape BCF

An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" SBC and "Branch", before version V10 R3.4.0, and OpenScape "BCF" before versions V10R10.12.00 and V10R11.05.02. This allows an unauthenticat...

10CVSS10AI score0.01861EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2023/12/05 12:00 a.m.•22 views

Atos Unify OpenScape SBC Security Vulnerability

Atos Unify OpenScape SBC is a datacenter-ready virtualization security application from Atos France. It is used to securely extend your applications beyond the network perimeter. A security vulnerability exists in Atos Unify OpenScape SBC prior to V10 R3.4.0, OpenScape Branch prior to V10 R3.4.0,...

10CVSS9.6AI score0.01861EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/05 12:00 a.m.•9 views

CVE-2023-6269: Improper Neutralization of Argument Delimiters in a Command

An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" SBC and "Branch", before version V10 R3.4.0, and OpenScape "BCF" before versions V10R10.12.00 and V10R11.05.02. This allows an unauthenticat...

10CVSS8AI score0.01861EPSS
SaveExploits2References3
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•17 views

The vulnerability of the application programming interface of the microprogramming system for controller security and session management in IP networks – OpenScape SBC (Session Border Controller). This software serves as an integration tool for communication systems into the unified communication system – OpenScape BCF (Business Communication Fabric). The OpenScape Branch server allows attackers to perform arbitrary actions.

The vulnerability of the application software interface for microprogramming controllers, which is used for security purposes and managing communication sessions in IP networks—the OpenScape SBC Session Border Controller—as well as the software used to integrate communication systems into the...

10CVSS8.2AI score0.03901EPSS
SaveExploits3References4
BDU FSTEC
BDU FSTEC
•added 2023/10/13 12:00 a.m.•21 views

The vulnerability of the web interface of the administration and service portal of Atos Unify OpenScape Common Management Platform allows a perpetrator to bypass security restrictions and execute arbitrary codes.

The vulnerability of the web interface of the administration and service portal of Atos Unify OpenScape Common Management Platform is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to circumvent security restrictions and execute...

8.8CVSS7.9AI score0.01095EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/10/13 12:00 a.m.•16 views

The vulnerability of the web interface of the administration and service portal of Atos Unify OpenScape Common Management Platform allows a perpetrator to bypass security restrictions and execute arbitrary codes.

The vulnerability of the web interface of the Atos Unify OpenScape Common Management Platform’s administration and service portal is related to an incorrect restriction on the path to the catalog. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute...

6.8CVSS7.9AI score0.00895EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/10/13 12:00 a.m.•16 views

The vulnerability of Atos Unify OpenScape 4000, a hybrid communication platform, allows a intruder to execute arbitrary commands.

The vulnerability of Atos Unify OpenScape 4000, a hybrid communication platform, is related to insufficient cleaning of input data during the processing of dtb format files. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

9CVSS7.9AI score0.01494EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/10/13 12:00 a.m.•16 views

The vulnerability of Atos Unify OpenScape 4000, a hybrid communication platform, and the Atos Unify OpenScape 4000 Manager, a network centralized management platform, allows attackers to execute arbitrary commands.

The vulnerability of Atos Unify OpenScape 4000, a hybrid communication platform, and the Atos Unify OpenScape 4000 Manager, a centralized network management platform, is related to insufficient cleaning of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary...

9CVSS7.9AI score0.01494EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2023/10/09 4:15 a.m.•10 views

CVE-2023-45356

Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access, via dtb pages of the platform portal. This is...

8.8CVSS7.3AI score0.01494EPSS
SaveExploits0References3
OSV
OSV
•added 2023/10/09 4:15 a.m.•19 views

CVE-2023-45356

Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access, via dtb pages of the platform portal. This is...

8.8CVSS5.8AI score0.01494EPSS
SaveExploits0References2
NVD
NVD
•added 2023/10/09 4:15 a.m.•42 views

CVE-2023-45356

Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access, via dtb pages of the platform portal. This is...

8.8CVSS8.9AI score0.01494EPSS
SaveExploits0References2
OSV
OSV
•added 2023/10/09 4:15 a.m.•14 views

CVE-2023-45355

Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access via the webservice. This is also known as...

8.8CVSS5.8AI score0.01494EPSS
SaveExploits0References2
NVD
NVD
•added 2023/10/09 4:15 a.m.•38 views

CVE-2023-45355

Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access via the webservice. This is also known as...

8.8CVSS8.9AI score0.01494EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/10/09 4:15 a.m.•12 views

CVE-2023-45354

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated remote attacker to execute arbitrary code on the operating system by using the Common Management Portal web interface. This is also known as OCMP-6589...

8.8CVSS7.7AI score0.01095EPSS
SaveExploits0References3
OSV
OSV
•added 2023/10/09 4:15 a.m.•14 views

CVE-2023-45354

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated remote attacker to execute arbitrary code on the operating system by using the Common Management Portal web interface. This is also known as OCMP-6589...

8.8CVSS6.2AI score0.01095EPSS
SaveExploits0References2
NVD
NVD
•added 2023/10/09 4:15 a.m.•37 views

CVE-2023-45352

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This...

8.8CVSS8.8AI score0.00895EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/10/09 4:15 a.m.•12 views

CVE-2023-45352

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This...

8.8CVSS7.7AI score0.00895EPSS
SaveExploits0References3
OSV
OSV
•added 2023/10/09 4:15 a.m.•17 views

CVE-2023-45352

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This...

8.8CVSS6.1AI score0.00895EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/10/09 4:15 a.m.•17 views

CVE-2023-45353

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interface for Authenticated remote upload and creation of arbitrary files affecting...

8.8CVSS7.7AI score0.00782EPSS
SaveExploits0References3
NVD
NVD
•added 2023/10/09 4:15 a.m.•44 views

CVE-2023-45354

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated remote attacker to execute arbitrary code on the operating system by using the Common Management Portal web interface. This is also known as OCMP-6589...

8.8CVSS8.9AI score0.01095EPSS
SaveExploits0References2
Rows per page
Query Builder