Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF vulnerability in HPE Version Control Repository Manager VCRM was found. The problem impacts all versions prior to 7.6...

CVE-2016-8513

CVE-2016-8513 describes a CSRF vulnerability in HPE Version Control Repository Manager (VCRM) affecting all versions prior to 7.6. A remote attacker could exploit this by convincing a user to follow a crafted link or HTML page to perform unauthorized actions. The vulnerability’s impact is indicat...

CVE-2016-8513

A Cross-Site Request Forgery CSRF vulnerability in HPE Version Control Repository Manager VCRM was found. The problem impacts all versions prior to 7.6...

PT-2018-5010

Name of the Vulnerable Software and Affected Versions HPE Version Control Repository Manager VCRM versions prior to 7.6 Description A remote malicious file upload issue was discovered. This issue affects all versions prior to the fixed version. Recommendations For versions prior to 7.6, update to...

CVE-2017-5787: Undefined Security Weakness

A remote denial of service vulnerability in HPE Version Control Repository Manager VCRM in all versions prior to 7.6 was found...

PT-2018-8272

Name of the Vulnerable Software and Affected Versions: HPE Version Control Repository Manager VCRM versions prior to 7.6 Description: A remote denial of service issue was discovered in HPE Version Control Repository Manager VCRM. Recommendations: For versions prior to 7.6, update to version 7.6 o...

CVE-2016-8514: Exposure of Sensitive Information to an Unauthorized Actor

A remote information disclosure in HPE Version Control Repository Manager VCRM was found. The problem impacts all versions prior to 7.6...

PT-2018-5009

Name of the Vulnerable Software and Affected Versions HPE Version Control Repository Manager VCRM versions prior to 7.6 Description A remote information disclosure issue was discovered, impacting the software. Recommendations For versions prior to 7.6, update to version 7.6 or later to resolve th...

PT-2018-5008

Name of the Vulnerable Software and Affected Versions HPE Version Control Repository Manager VCRM versions prior to 7.6 Description A Cross-Site Request Forgery CSRF issue was discovered. This is a type of attack where an attacker tricks a user into performing unintended actions on a web...

CVE-2016-8513: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability in HPE Version Control Repository Manager VCRM was found. The problem impacts all versions prior to 7.6...

CVE-2016-8515: Unrestricted Upload of File with Dangerous Type

A remote malicious file upload vulnerability in HPE Version Control Repository Manager VCRM was found. The problem impacts all versions prior to 7.6...

CVE-2018-5307

Multiple cross-site scripting XSS vulnerabilities in Sonatype Nexus Repository Manager aka NXRM 2.x before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via 1 the repoId or 2 format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; 3 the filename...

CVE-2018-5306

Multiple cross-site scripting XSS vulnerabilities in Sonatype Nexus Repository Manager aka NXRM 3.x before 3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the repoId or 2 format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; 3 the filename in...

CVE-2018-5307

Multiple cross-site scripting XSS vulnerabilities in Sonatype Nexus Repository Manager aka NXRM 2.x before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via 1 the repoId or 2 format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; 3 the filename...

CVE-2018-5306

Multiple cross-site scripting XSS vulnerabilities in Sonatype Nexus Repository Manager aka NXRM 3.x before 3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the repoId or 2 format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; 3 the filename in...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sonatype Nexus Repository Manager aka NXRM 3.x before 3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the repoId or 2 format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; 3 the filename in...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sonatype Nexus Repository Manager aka NXRM 2.x before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via 1 the repoId or 2 format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; 3 the filename...

CVE-2018-5307

Summary: CVE-2018-5307 covers multiple cross-site scripting (XSS) vulnerabilities in Sonatype Nexus Repository Manager (NXRM) 2.x prior to 2.14.6, with exploitation possible via several parameters/files (repoId, format parameter to healthCheckFileDetail, staging upload filename, username on user ...

CVE-2018-5307

Multiple cross-site scripting XSS vulnerabilities in Sonatype Nexus Repository Manager aka NXRM 2.x before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via 1 the repoId or 2 format parameter to service/siesta/healthcheck/healthCheckFileDetail/.../index.html; 3 the filename...

CVE-2018-5306

CVE-2018-5306 affects Sonatype Nexus Repository Manager (NXRM) 3.x prior to 3.8. An XSS flaw exists across multiple vectors: repoId/format in healthCheckFileDetail, File Upload in Staging Upload, username during user creation, and IQ Server URL field in IQ Server Connection. Exploitation could in...