CVE-2020-6855

A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to parameterize housekeeping jobs in a way that exhausts system resources and results in a denial of service...

CVE-2020-6855

CVE-2020-6855 affects SOS JobScheduler’s JOC Cockpit component (versions 1.11 and 1.13.2). The vulnerability is a large or infinite loop triggered by parameterizing housekeeping jobs, leading to resource exhaustion and denial of service. NVD reports a CVSSv3.1 base score of 6.5 (AV:N/AC:L/PR:L/UI...

CVE-2020-6856

CVE-2020-6856 affects SOS JobScheduler’s JOC Cockpit (versions 1.12 and 1.13.2). The issue is an XML External Entity (XEE) vulnerability where an entity declaration in XML used to specify runtime settings for jobs/orders can cause an attacker to read server files. Connected sources consistently d...

CVE-2020-6856

An XML External Entity XEE vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read files from the server via an entity declaration in any of the XML documents that are used to specify the run-time settings of jobs and orders...

CVE-2020-6854

A cross-site scripting XSS vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to inject arbitrary web script or HTML via JSON properties available from the REST API...

Cross site scripting

A cross-site scripting XSS vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to inject arbitrary web script or HTML via JSON properties available from the REST API...

CVE-2020-6854

A cross-site scripting XSS vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to inject arbitrary web script or HTML via JSON properties available from the REST API...

CVE-2020-6854

The provided connected documents confirm a cross-site scripting (XSS) vulnerability in the SOS JobScheduler JOC Cockpit component, affecting versions 1.11 and 1.13.2. The root cause is input handling that allows JSON properties from the REST API to be interpreted as executable client-side script ...

CVE-2014-5391

Cross-site scripting XSS vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote attackers to inject arbitrary web script or HTML via the hash property location.hash...

Directory traversal

Directory traversal vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info permission to read arbitrary files in the webroot via unspecified vectors...

CVE-2014-5393

The CVE-2014-5393 entry is confirmed for JobScheduler: the JobScheduler Operations Center (JOC) is affected. Affected versions are before 1.6.4246 and before 1.7.4241 (1.7.x). The issue is a directory traversal vulnerability that can be exploited by remote authenticated users with the info permis...

CVE-2014-5391

CVE-2014-5391 is a DOM-based Cross-Site Scripting vulnerability in the JobScheduler Operations Center (JOC) of SOS JobScheduler. Affected versions are before 1.6.4246 and before 1.7.4241 for the 1.6.x and 1.7.x lines, respectively. The vulnerability allows an attacker to inject arbitrary web scri...

CVE-2014-5391

Cross-site scripting XSS vulnerability in the JobScheduler Operations Center JOC in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote attackers to inject arbitrary web script or HTML via the hash property location.hash...