CVE-2022-26973

The Barco Control Room Management Suite web application (TransForm N) prior to version 3.14 exposes a license file upload mechanism. The root cause is a flaw in handling the license file name, where manipulating the filename causes the application to return an error message that reveals internal ...

CVE-2022-26972

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not correctly sanitized, leading to reflected XSS...

CVE-2022-26972

Barco Control Room Management Suite (TransForm N) web application is affected up to version 3.14. The vulnerability stems from unsanitized URL parameters on the /cgi-bin endpoint, enabling reflected cross-site scripting (XSS). Multiple connected sources corroborate the issue and scope, without de...

CVE-2022-26971

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. This upload can be executed without authentication...

CVE-2022-26971

Barco Control Room Management Suite web application (TransForm N, before version 3.14) exposes a license file upload mechanism that can be triggered without authentication. Root cause: unauthenticated upload path accessible in the web interface. Impact: enables unauthorized file uploads (license ...

PT-2022-18153

Name of the Vulnerable Software and Affected Versions Barco Control Room Management Suite versions prior to 3.14 Description The issue concerns the exposure of log files without requiring authentication in the Barco Control Room Management Suite web application, which is part of TransForm N...

CVE-2022-26978: Improper Neutralization of Input During Web Page Generation

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. The osusername parameters is not correctly sanitized, leading to reflected XSS...

CVE-2022-26971: Missing Authentication for Critical Function

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. This upload can be executed without authentication...

CVE-2022-26975: Improper Authentication

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication...

CVE-2022-26974: Improper Neutralization of Input During Web Page Generation

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism. Lack of input sanitization in the upload mechanism leads to reflected XSS...

CVE-2022-26972: Improper Neutralization of Input During Web Page Generation

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not correctly sanitized, leading to reflected XSS...

PT-2022-18152

Name of the Vulnerable Software and Affected Versions Barco Control Room Management Suite web application versions prior to 3.14 Description The issue is related to a file upload mechanism in the Barco Control Room Management Suite web application, which lacks input sanitization. This leads to...

CVE-2022-26977: Improper Neutralization of Input During Web Page Generation

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization of the upload mechanism is leads to stored XSS...

CVE-2022-26973: Generation of Error Message Containing Sensitive Information

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. By tweaking the license file name, the returned error message exposes internal directory path details...

PT-2022-18151

Name of the Vulnerable Software and Affected Versions Barco Control Room Management Suite web application version prior to 3.14 Description The issue concerns the exposure of internal directory path details through the license file upload mechanism in the web application. By manipulating the...

CVE-2022-26976: Improper Neutralization of Input During Web Page Generation

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization in the upload mechanism is leads to reflected XSS...

PT-2022-18155

Name of the Vulnerable Software and Affected Versions Barco Control Room Management Suite web application versions prior to 3.14 Description The issue is related to the exposure of a license file upload mechanism in the web application, which lacks input sanitization. This leads to stored XSS...

PT-2022-18154

Name of the Vulnerable Software and Affected Versions Barco Control Room Management Suite web application versions prior to 3.14 Description The issue concerns a license file upload mechanism in the Barco Control Room Management Suite web application that lacks input sanitization, leading to...

PT-2022-18150

Name of the Vulnerable Software and Affected Versions Barco Control Room Management Suite web application version prior to 3.14 Description The issue is related to the exposure of a URL /cgi-bin endpoint in the web application, where URL parameters are not correctly sanitized. This leads to...

PT-2022-18156

Name of the Vulnerable Software and Affected Versions Barco Control Room Management Suite web application version prior to 3.14 Description The issue concerns the exposure of a URL "/checklogin.jsp" endpoint, where the os username parameter is not correctly sanitized. This leads to reflected XSS,...