McAfee ePolicy Orchestrator Unsupported Version Detection

According to its version, the installation of McAfee ePolicy Orchestrator ePO on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable...

Realistic Risk Assessment Key to Security Management

PUNTA CANA – Although it may not be the most thrilling part of a security team’s job, the idea of operational risk assessment and management is perhaps the most important aspect of organizational security. Steve Adegbite, senior vice president in charge of enterprise information security program...

ILIAS eLearning 4.3.4 & 4.4 CMS - Persistent Vulnerability

Document Title: =============== ILIAS eLearning 4.3.4 & 4.4 CMS - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1122 Release Date: ============= 2013-10-28 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2013-5537

The web framework on Cisco Web Security Appliance WSA, Email Security Appliance ESA, and Content Security Management Appliance SMA devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service management GUI outage via multiple T...

Code injection

The web framework on Cisco Web Security Appliance WSA, Email Security Appliance ESA, and Content Security Management Appliance SMA devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service management GUI outage via multiple T...

PT-2013-5618

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA affected versions not specified Cisco Email Security Appliance ESA affected versions not specified Cisco Content Security Management Appliance SMA affected versions not specified Description The issue is relate...

CVE-2013-5537: Improper Input Validation

The web framework on Cisco Web Security Appliance WSA, Email Security Appliance ESA, and Content Security Management Appliance SMA devices does not properly manage the state of HTTP and HTTPS sessions, which allows remote attackers to cause a denial of service management GUI outage via multiple T...

Juniper NSM GUI Server Detection

The remote host is running the Juniper NSM GUI Server. The NSM GUI accepts connections from users using the NSM GUI Client, which allows for administration of the NSM servers. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69870; scriptversion"1.9";...

Cisco Content Security Management Appliance XSS and CSRF Vulnerabilities

Cisco Content Security Management Appliance is prone to cross site scripting and cross site request forgery vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cisco Content Security Management (CSM) Appliance Detection (HTTP)

HTTP based detection of the Cisco Content Security Management CSM Appliance. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Ironport Cross Site Request Forgery / Cross Site Scripting

Cisco IronPort Security Management Appliance M170 version 7.9.1-030 suffers from cross site scripting and cross site request forgery vulnerabilities. Tittle: Cisco IronPort Security Management Appliance - Multiple issues Risk: Medium Date: 20.May.2013 Author: Pedro Andujar Twitter: @pandujar .:...

UBUNTU-CVE-2013-5321

Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management OSSIM 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 sensor parameter in a Query action to forensics/baseqrymain.php; the 2 tcpflags or 3 tcpport04 parameter to...

BYOD Gives Vulnerable Devices Corporate Network Access

Policies allowing employees to bring their own devices to work BYOD have the unintended consequence of increasing the total number of vulnerable devices connecting to corporate networks and accessing corporate data, a report released today by Rapid 7 said. While the general consensus says that BY...

Cisco Content Security Management Appliance Web Detection

The web management interface for Cisco Content Security Management Appliance SMA was detected on the remote host. SMA provides centralized management for Cisco Email Security and Web Security Appliances. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid69077;...

FAA Civil Aviation Registry Vulnerable to Data Breach

The Federal Aviation Administration’s FAA Civil Aviation Registry lacks proper security controls to prevent unauthorized access to its systems, according to a report based on a recent audit undertaken by the Office of the Inspector General OIG for the United States Department of Transportation Do...

CVE-2013-3395

Cross-site request forgery CSRF vulnerability in the web framework on Cisco IronPort Web Security Appliance WSA devices, Email Security Appliance ESA devices, and Content Security Management Appliance SMA devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs...

CVE-2013-3395

CVE-2013-3395 describes a CSRF flaw in the web framework of Cisco IronPort products (Web Security Appliance, Email Security Appliance, Content Security Management Appliance). The vulnerability allows remote attackers to hijack the authentication of arbitrary users by inducing them to perform unwa...

Cisco Web Security Appliance Web框架任意命令执行漏洞(CVE-2013-3384)

CVECAN ID: CVE-2013-3384 Cisco Web Security Appliance是安全的Web网关，在一个平台上集成了恶意软件防护、应用可视化控制、策略控制等。Cisco IronPort AsyncOS是电子邮件安全设备。 Cisco Web Security Appliance设备上的IronPort AsyncOS在Web框架的实现上，以及Content Security Management Appliance设备和Email Security...

PT-2013-4352

Name of the Vulnerable Software and Affected Versions Cisco IronPort Web Security Appliance WSA devices affected versions not specified Cisco Email Security Appliance ESA devices affected versions not specified Cisco Content Security Management Appliance SMA devices affected versions not specifie...

McAfee ePolicy Orchestrator Installed (credentialed check)

McAfee ePolicy Orchestrator, a centralized security management application, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67119; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...