CVE-2013-4778: Exposure of Sensitive Information to an Unauthorized Actor

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to obtain sensitive server and statistics information via unspecified vectors...

CVE-2013-4779: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-5187

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description The issue allows remote attackers to read arbitrary files via unspecified vectors,...

PT-2013-5188

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description The issue allows remote attackers to execute arbitrary commands via unspecified...

Siemens OpenScape Branch / Session Border Controller XSS / Disclosure / Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities in Siemens OpenScape Branch and OpenScape Session Border Controller product: Siemens OpenScape Branch Siemens OpenScape Session Border Controller...