CVE-2023-32569

An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2.800 and 8.x before 8.0.410. The InfoScale VIOM web application is vulnerable to SQL Injection in some of the areas of the application. This allows attackers who must have admin credentials to submit arbitrary SQL...

PT-2023-8939 · Veritas · Veritas Infoscale Operations Manager

Name of the Vulnerable Software and Affected Versions: Veritas InfoScale Operations Manager versions prior to 7.4.2.800 Veritas InfoScale Operations Manager versions 8.x prior to 8.0.410 Description: The issue arises from the VIOM web application's failure to validate user-supplied data, which is...

Practice Operations Manager Looks Back On First Five Months With Rapid7

Elianna Sfez is a Threat Intelligence Practice Operations Manager based in Rapid7’s Tel Aviv office. As she approaches her six month anniversary with the company, we sat down to chat about her new hire journey, initial impressions and experiences in her new role, Rapid7 culture, and more. Tell me...

SquaredUp Dashboard Server SCOM Edition 跨站脚本漏洞

SquaredUp Dashboard Server SCOM Edition is a data visualization platform for Microsoft System Center Operations Manager and OMS from SquaredUp. A security vulnerability exists in SquaredUp Dashboard Server SCOM Edition prior to version 5.7.1 GA that stems from an open redirection issue in the...

SquaredUp Dashboard Server SCOM Edition 跨站脚本漏洞

SquaredUp Dashboard Server SCOM Edition is a data visualization platform for Microsoft System Center Operations Manager and OMS from SquaredUp. A security vulnerability exists in SquaredUp Dashboard Server SCOM Edition prior to 5.7.1 GA that stems from the SquaredUp SCOM version allowing XSS...

SquaredUp Dashboard Server SCOM Edition 输入验证错误漏洞

SquaredUp Dashboard Server SCOM Edition is a data visualization platform for Microsoft System Center Operations Manager and OMS from SquaredUp. A security vulnerability exists in SquaredUp Dashboard Server SCOM Edition prior to version 5.7.1 GA that stems from an open redirection issue in the...

Synology Presto File Server 路径遍历漏洞

Synology Presto File Server is a high-speed file transfer suite from China-based Synology Inc. A path traversal vulnerability exists in Synology Presto File Server versions prior to 2.1.2-1601, which stems from improperly restricting pathnames of restricted directories in the File Operations...

CVE-2022-33640

System Center Operations Manager: Open Management Infrastructure OMI Elevation of Privilege Vulnerability...

CVE-2022-33640

System Center Operations Manager: Open Management Infrastructure OMI Elevation of Privilege Vulnerability...

CVE-2022-33640 System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

...

CVE-2022-33640

CVE-2022-33640 affects Microsoft System Center Operations Manager via Open Management Infrastructure (OMI). The connected docs identify an elevation of privilege vulnerability with a LOCAL attack vector, requiring LOW privileges and no user interaction (CVSSv3.1 base score 7.8, HIGH impact on con...

CVE-2022-33640 System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

...

PT-2022-21795 · Microsoft · System Center Operations Manager

Name of the Vulnerable Software and Affected Versions: System Center Operations Manager: Open Management Infrastructure OMI affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. There is no information provided about the estimated number of...

KLA12565 PE vulnerability in Microsoft System Center

Elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-29149 Related products Microsoft-System-Center-Operations-Manager CVE list CVE-2022-29149 unknown KB list Solution Install...

Microsoft Azure 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure. The following products and versions are affected: Azure Automation State Configuration, DSC Extension, Azure...

SRC-2022-0017 : VMware vRealize Operations Manager MainPortalFilter Authentication Bypass Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to bypass authentication on affected installations of VMware vRealize Operations. Authentication is not required to exploit this vulnerability. The specific flaw exists within MainPortalFilter class. The issue results from the...

SRC-2022-0020 : VMware vRealize Operations Manager generateSupportBundle VCOPS_BASE Privilege Escalation Vulnerability

Vulnerability Details: This vulnerability allows local attackers to escalate privileges on affected installations of VMware vRealize Operations Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specif...

Exploit for CVE-2021-21983

CVE-2021-21975 VMware vRealize Operations vROps Manager API...

Veritas InfoScale Operations Manager路径遍历漏洞

Veritas Infoscale Operations Manager is a suite of software from Veritas USA for the management of entire InfoScale deployments. Veritas InfoScale Operations Manager is vulnerable to a path traversal vulnerability in the web server admin/cgi-bin/rulemgr.pl/getfile/, which is caused by a lack of...

Veritas Infoscale Operations Manager跨站脚本漏洞

Veritas Infoscale Operations Manager is a suite of software from Veritas, Inc. for the management of entire InfoScale deployments. A cross-site scripting vulnerability exists in Veritas InfoScale Operations Manager, which stems from a lack of filtering and escaping of user-submitted parameters in...