Lucene search
+L

84 matches found

OSV
OSV
•added 2021/03/17 5:15 p.m.•14 views

CVE-2020-17457

Fujitsu ServerView Suite iRMC before 9.62F allows XSS. An authenticated attacker can store an XSS payload in the PSCUFILEINIT field of a Save Configuration XML document. The payload is triggered in the HTTP error response pages...

5.4CVSS5.8AI score0.00505EPSS
SaveExploits0References2
Prion
Prion
•added 2021/03/17 5:15 p.m.•32 views

Cross site scripting

Fujitsu ServerView Suite iRMC before 9.62F allows XSS. An authenticated attacker can store an XSS payload in the PSCUFILEINIT field of a Save Configuration XML document. The payload is triggered in the HTTP error response pages...

3.5CVSS5.2AI score0.00505EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2021/03/17 3:08 p.m.•77 views

CVE-2020-17457

Authenticated attackers can trigger stored XSS in Fujitsu ServerView Suite iRMC before version 9.62F. The vulnerability is caused by injecting a payload into the PSCU_FILE_INIT field of a Save Configuration XML document, with the payload rendered on HTTP error response pages. Affected product: Fu...

5.4CVSS5.1AI score0.00505EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/03/17 12:00 a.m.•18 views

FUJITSU LIMITED Fujitsu ServerView Suite 跨站脚本漏洞

FUJITSU LIMITED Fujitsu ServerView Suite is a software application from FUJITSU LIMITED. It provides a lifecycle management of your servers - from a single system to large server pool capabilities. A security vulnerability exists in Fujitsu ServerView Suite iRMC before 9.62F, which can be exploit...

5.4CVSS5.8AI score0.00505EPSS
SaveExploits0References3
NVD
NVD
•added 2020/02/07 11:15 p.m.•37 views

CVE-2019-13163

The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager V10 and other versions, Interstage Application Server V12 and other versions, Interstage Business Application Manager V2 and other versions, Interstage Information Integrator V...

5.9CVSS5.7AI score0.006EPSS
SaveExploits0References1
Prion
Prion
•added 2020/02/07 11:15 p.m.•27 views

Design/Logic Flaw

The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager V10 and other versions, Interstage Application Server V12 and other versions, Interstage Business Application Manager V2 and other versions, Interstage Information Integrator V...

4.3CVSS5.7AI score0.006EPSS
SaveExploits0References1Affected Software22
Cvelist
Cvelist
•added 2020/02/07 10:45 p.m.•52 views

CVE-2019-13163

The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager V10 and other versions, Interstage Application Server V12 and other versions, Interstage Business Application Manager V2 and other versions, Interstage Information Integrator V...

5.7AI score0.006EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/02/24 2:00 a.m.•38 views

CVE-2017-18197

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...

9.3AI score0.02899EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2018/02/24 2:00 a.m.•55 views

CVE-2017-18197

In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert is missing flags to prevent XML External Entity XXE attacks, as demonstrated by /ServerView...

9.8CVSS9.4AI score0.02899EPSS
SaveExploits1
NVD
NVD
•added 2014/08/14 5:01 a.m.•25 views

CVE-2014-3898

Cross-site scripting XSS vulnerability in Fujitsu ServerView Operations Manager 5.00.09 through 6.30.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.7AI score0.01792EPSS
SaveExploits0References5
Prion
Prion
•added 2014/08/14 5:01 a.m.•24 views

Cross site scripting

Cross-site scripting XSS vulnerability in Fujitsu ServerView Operations Manager 5.00.09 through 6.30.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6.1AI score0.01792EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2014/08/14 1:00 a.m.•37 views

CVE-2014-3898

Cross-site scripting XSS vulnerability in Fujitsu ServerView Operations Manager 5.00.09 through 6.30.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.7AI score0.01792EPSS
SaveExploits0References5
CVE
CVE
•added 2014/08/14 1:00 a.m.•51 views

CVE-2014-3898

CVE-2014-3898 affects Fujitsu ServerView Operations Manager (V5.00.09–V6.30.05). It is a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary scripts via unspecified vectors, potentially executing in the user’s browser. Remediation guidance in connected sources a...

4.3CVSS5.8AI score0.01792EPSS
SaveExploits0References5Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/08/01 6:42 a.m.•16 views

ServerView Operations Manager vulnerable to cross-site scripting

Overview ServerView Operations Manager provided by FUJITSU LIMITED is server management software. ServerView Operations Manager contains a cross-site scripting vulnerability. TAIZO TSUKAMOTO of GLOBAL SECURITY EXPERTS inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...

4.3CVSS6.1AI score0.01792EPSS
SaveExploits0References6
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•22 views

Fujitsu ServerView <= 4.50.8 DBASCIIAccess Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24762/info Fujitsu ServerView is prone to a remote command-execution vulnerability because it fails to adequately sanitize user-supplied data. Attackers can exploit this issue to execute arbitrary commands with the...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2013/07/30 12:00 a.m.•10 views

ServerView Server Detection

Binary data 6957.prm...

7.3AI score
SaveExploits0References1
Prion
Prion
•added 2008/07/10 6:41 p.m.•19 views

Stack overflow

Multiple stack-based buffer overflows in the ServerView web interface SnmpGetMibValues.exe in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote authenticated users to execute arbitrary code via a crafted URL...

6.5CVSS7.9AI score0.02294EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2008/07/10 6:41 p.m.•24 views

CVE-2008-3126

Multiple stack-based buffer overflows in the ServerView web interface SnmpGetMibValues.exe in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote authenticated users to execute arbitrary code via a crafted URL...

6.5CVSS7.3AI score0.02294EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2008/07/10 6:00 p.m.•34 views

CVE-2008-3126

Multiple stack-based buffer overflows in the ServerView web interface SnmpGetMibValues.exe in Fujitsu Siemens Computers ServerView 04.60.07 and earlier allow remote authenticated users to execute arbitrary code via a crafted URL...

7.3AI score0.02294EPSS
SaveExploits0References5
CVE
CVE
•added 2008/07/10 6:00 p.m.•64 views

CVE-2008-3126

The CVE-2008-3126 issue affects Fujitsu Siemens Computers ServerView (04.60.07 and earlier), specifically the ServerView web interface component SnmpGetMibValues.exe. The root cause is multiple stack-based buffer overflows that allow remote authenticated users to execute arbitrary code via a craf...

6.5CVSS7.3AI score0.02294EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder