Lucene search
+L

11010 matches found

CNVD
CNVD
added 2021/02/07 12:00 a.m.19 views

Micro Focus Application Performance Management Cross-Site Request Forgery Vulnerability

Micro Focus Application Performance Management is an application monitoring and management solution that lets you isolate any problems with all your applications - on-premise, cloud and mobile - in real time. A cross-site request forgery vulnerability exists in Micro Focus Application Performance...

6.5CVSS6.7AI score0.00478EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/02/07 12:00 a.m.37 views

Micro Focus Application Performance Management Cross-Site Scripting Vulnerability

Micro Focus Application Performance Management is an application monitoring and management solution that lets you isolate any problems with all your applications - on-premise, cloud and mobile - in real time. A cross-site scripting vulnerability exists in Micro Focus Application Performance...

4.8CVSS6.1AI score0.00612EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/06 2:15 a.m.5 views

CVE-2021-22500

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing...

6.5CVSS6.6AI score0.00478EPSS
SaveExploits0References1
Prion
Prion
added 2021/02/06 2:15 a.m.22 views

Cross site request forgery (csrf)

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing...

4.3CVSS6.4AI score0.00478EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/06 2:15 a.m.6 views

CVE-2021-22500

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing...

6.5CVSS6.6AI score0.00478EPSS
SaveExploits0References2
OSV
OSV
added 2021/02/06 1:15 a.m.10 views

CVE-2021-22499

Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow persistent XSS attack...

4.8CVSS5.8AI score0.00612EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/02/06 1:15 a.m.6 views

CVE-2021-22499

Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow persistent XSS attack...

4.8CVSS5.8AI score0.00612EPSS
SaveExploits0References2
CVE
CVE
added 2021/02/06 1:03 a.m.101 views

CVE-2021-22500

CVE-2021-22500 concerns a Cross-Site Request Forgery in Micro Focus Application Performance Management (APM) affecting versions 9.40, 9.50 and 9.51. The connected Red Hat, CNVD, CVE lists, and NVD entry corroborate the same description: an attacker could trick a logged-in user into executing acti...

6.5CVSS6.4AI score0.00478EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2021/02/06 12:00 a.m.52 views

HCL OneTest License Issue Vulnerability

HCL OneTest is a software testing tool from HCL India that provides multiple testing options. The software supports API testing, functional testing, UI testing, performance testing and service virtualization to support software automation testing. An authorization issue vulnerability exists in HC...

9.8CVSS7AI score0.01213EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/02/05 12:00 a.m.13 views

Micro Focus Application Performance Management 跨站请求伪造漏洞

Micro Focus Application Performance Management is an application monitoring and management solution that lets you isolate any problems with all your applications - on-premise, cloud and mobile - in real time. A cross-site request forgery vulnerability exists in Micro Focus Application Performance...

6.5CVSS6.6AI score0.00478EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/02/05 12:00 a.m.17 views

SolarWinds Orion Platform Access Control Error Vulnerability

SolarWinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. An...

7.8CVSS6.7AI score0.00593EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/02/05 12:00 a.m.15 views

Micro Focus Application Performance Management 跨站脚本漏洞

Micro Focus Application Performance Management is an application monitoring and management solution that lets you isolate any problems with all your applications - on-premise, cloud and mobile - in real time. A cross-site scripting vulnerability exists in Micro Focus Application Performance...

4.8CVSS5.7AI score0.00612EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/02/05 12:00 a.m.18 views

SolarWinds Orion Platform Code Execution Vulnerability

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...

10CVSS7.5AI score0.36426EPSS
SaveExploits1References1
NVD
NVD
added 2021/02/04 7:15 a.m.27 views

CVE-2020-14247

HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID...

6.5CVSS0.00669EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/04 7:15 a.m.9 views

CVE-2020-14246

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...

7.5CVSS7.1AI score0.00688EPSS
SaveExploits0References1
NVD
NVD
added 2021/02/04 7:15 a.m.28 views

CVE-2020-14246

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...

7.5CVSS0.00688EPSS
SaveExploits0References1
Prion
Prion
added 2021/02/04 7:15 a.m.17 views

Design/Logic Flaw

HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID...

6.4CVSS6.4AI score0.00669EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/02/04 7:15 a.m.16 views

Authentication flaw

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...

5CVSS7.7AI score0.00688EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/02/04 6:45 a.m.82 views

CVE-2020-14246

The CVE-2020-14246 entry concerns HCL OneTest Performance (V9.5, V10.0, V10.1) using basic authentication, which can be decoded to reveal credentials. The affected software is HCL OneTest Performance; the root cause is weak basic authentication. Practical impact states that an attacker could deco...

7.5CVSS7.6AI score0.00688EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/02/04 6:45 a.m.31 views

CVE-2020-14246

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...

7.7AI score0.00688EPSS
SaveExploits0References1
Rows per page
Query Builder