150 matches found
PT-2021-22802
Name of the Vulnerable Software and Affected Versions SquaredUp for SCOM version 5.2.1.6654 Description A cross-site scripting XSS issue in the integration configuration of SquaredUp for SCOM allows remote attackers to inject arbitrary web script or HTML via dashboard actions. Recommendations For...
PT-2021-22805
Name of the Vulnerable Software and Affected Versions SquaredUp for SCOM version 5.2.1.6654 Description A cross-site scripting XSS issue in integration configuration allows remote attackers to inject arbitrary web script or HTML via modification of the authorisationUrl in some integration...
PT-2021-22804
Name of the Vulnerable Software and Affected Versions SquaredUp for SCOM version 5.2.1.6654 Description An issue was discovered in the Download Log feature in System / Maintenance, which is susceptible to a local file inclusion vulnerability when processing remote input in the log files downloade...
CVE-2021-40096: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via modification of the authorisationUrl in some integration configurations...
CVE-2021-40095: Undefined Security Weakness
An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptible to a local file inclusion vulnerability when processing remote input in the log files downloaded by an authenticated administrator user, leading to the ability to read...
CVE-2021-40094: Improper Neutralization of Input During Web Page Generation
A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device...
CVE-2021-40093: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via dashboard actions...
CVE-2021-40092: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...
CVE-2021-40091
An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...
CVE-2021-40091
An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...
CVE-2021-40091
An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...
Server side request forgery (ssrf)
An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...
CVE-2021-40091
An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...
CVE-2021-40091
CVE-2021-40091 describes an SSRF vulnerability in SquaredUp for SCOM 5.2.1.6654 . The affected product is SquaredUp for SCOM; the root cause is an SSRF issue. Impact details from the entry include high severity with network attack vector and low attack complexity, with both confidentiality, integ...
PT-2021-22800
Name of the Vulnerable Software and Affected Versions SquaredUp for SCOM version 5.2.1.6654 Description A Server-Side Request Forgery SSRF issue was discovered. This issue allows an attacker to forge requests from the server, potentially leading to unauthorized access to sensitive data or systems...
CVE-2021-40091: Server-Side Request Forgery (SSRF)
An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...
CVE-2021-41352
SCOM Information Disclosure Vulnerability...
Information disclosure
SCOM Information Disclosure Vulnerability...
CVE-2021-41352 SCOM Information Disclosure Vulnerability
...
CVE-2021-41352
CVE-2021-41352 corresponds to a SCOM information disclosure vulnerability affecting System Center Operations Manager 2012 R2, 2016 and 2019. The connected Nessus/NASL entry describes an information disclosure vulnerability in SCOM’s web-facing components, specifically an insecure direct object re...