PT-2021-15108

Name of the Vulnerable Software and Affected Versions Micro Focus Application Performance Management versions 9.40, 9.50 and 9.51 Description The issue is related to a Persistent Cross-Site scripting vulnerability that could allow a persistent XSS attack. Recommendations For versions 9.40, 9.50,...

PT-2021-15109

Name of the Vulnerable Software and Affected Versions Micro Focus Application Performance Management versions 9.40 through 9.51 Description The issue is related to a Cross Site Request Forgery vulnerability that could be exploited by an attacker to trick users into executing actions of the...

CVE-2021-22500: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing...

CVE-2021-22499: Improper Neutralization of Input During Web Page Generation

Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow persistent XSS attack...

SolarWinds Orion Platform Access Control Error Vulnerability

SolarWinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. An...

SolarWinds Orion Platform Code Execution Vulnerability

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...

Micro Focus Application Performance Management Cross-site Request Forgery Vulnerability

Micro Focus Application Performance Management is an application monitoring and management solution that lets you isolate any problems with all your applications - on-premise, cloud and mobile - in real time. A cross-site request forgery vulnerability exists in Micro Focus Application Performance...

Micro Focus Application Performance Management Cross-Site Script Vulnerabilities

Micro Focus Application Performance Management is an application monitoring and management solution that lets you isolate any problems with all your applications - on-premise, cloud and mobile - in real time. A cross-site scripting vulnerability exists in Micro Focus Application Performance...

CVE-2020-14246

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...

CVE-2020-14247

HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID...

CVE-2020-14246

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...

Design/Logic Flaw

HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID...

Authentication flaw

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...

CVE-2020-14246

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...

CVE-2020-14246

The CVE-2020-14246 entry concerns HCL OneTest Performance (V9.5, V10.0, V10.1) using basic authentication, which can be decoded to reveal credentials. The affected software is HCL OneTest Performance; the root cause is weak basic authentication. Practical impact states that an attacker could deco...

CVE-2020-14247

Summary: CVE-2020-14247 affects HCL OneTest Performance versions 9.5, 10.0 and 10.1. The vulnerability arises from an inadequate session timeout, which could allow an attacker to guess and reuse a valid session ID. What’s affected: HCL OneTest Performance (V9.5, V10.0, V10.1). Root cause: Inadequ...

CVE-2020-14247

HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2021:0348 An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

PT-2021-9704

Name of the Vulnerable Software and Affected Versions HCL OneTest Performance versions 9.5 through 10.1 Description The issue is related to the use of basic authentication in HCL OneTest Performance, which is considered relatively weak. An attacker could potentially decode the encoded credentials...

HCL OneTest security vulnerabilities

HCL OneTest is a software testing tool from HCL India that provides multiple testing options. The software supports API testing, functional testing, UI testing, performance testing and service virtualization to support software automation testing. A security vulnerability exists in HCL OneTest...