Unify OpenScape Xpressions Information Disclosure Vulnerability

OpenScape includes collaboration, mobility, video and other tools based on an open architecture with carrier-grade stability and reliability; at the same time, it is a "cloud-ready" solution that makes it easy to host a variety of applications, simplify business processes and reduce enterprise...

CVE-2013-4781

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2013-4780

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-4778

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to obtain sensitive server and statistics information via unspecified vectors...

CVE-2013-4779

Cross-site scripting XSS vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Session fixation

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to read arbitrary files via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to obtain sensitive server and statistics information via unspecified vectors...

CVE-2013-4778

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to obtain sensitive server and statistics information via unspecified vectors...

CVE-2013-4778

CVE-2013-4778 affects Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before specific version updates (OpenScape Branch before 2 R0.32.0 and SBC before 7 R1.7.0). The vulnerability is exposed via core/getLog.php, allowing remote attackers to obtain sens...

CVE-2013-4780

CVE-2013-4780 affects Siemens OpenScape Branch and OpenScape SBC (before 2 R0.32.0 and before 7 R1.7.0). The vulnerability allows remote attackers to read arbitrary files via unspecified vectors. Affected components are core/getLog.php on the Siemens OpenScape appliances; no explicit exploit deta...

CVE-2013-4781

Affected products: Siemens OpenScape Branch appliance and OpenScape Session Border Controller (SBC). Vulnerable component: core/getLog.php. Vulnerability: remote attackers can execute arbitrary commands via unspecified vectors. Affected versions: OpenScape Branch before 2 R0.32.0 and OpenScape SB...

CVE-2013-4780

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-4779

The CVE-2013-4779 entry documents a Cross-site Scripting (XSS) vulnerability in the file core/handleTw.php for Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC). Affected versions are OpenScape Branch before 2 R0.32.0 and SBC before 7 R1.7.0 (and 7 before...

CVE-2013-4781

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2013-4779

Cross-site scripting XSS vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-5186

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description A cross-site scripting XSS issue exists in the core/handleTw.php file, allowing...

PT-2013-5185

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description The issue allows remote attackers to obtain sensitive server and statistics...

CVE-2013-4780: Exposure of Sensitive Information to an Unauthorized Actor

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-4781: Improper Neutralization of Special Elements used in an OS Command

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to execute arbitrary commands via unspecified vectors...