CVE-2021-38133 Possible Improper authentication Vulnerability in OpenText eDirectory

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000...

CVE-2021-38133

OpenText eDirectory is affected by CVE-2021-38133 in versions prior to 9.2.6.0000. The vulnerability is described as an External Service Interaction attack affecting authentication, with CVSS v3.1 base scores indicating high/medium severity (C:H, UI:R, network attack). Root cause is not explicitl...

OpenText eDirectory 安全漏洞

OpenText eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from OpenText Canada. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. A security...

PT-2024-10993

Name of the Vulnerable Software and Affected Versions OpenText eDirectory versions prior to 9.2.6.0000 Description A possible External Service Interaction attack in eDirectory has been discovered in OpenText eDirectory. Recommendations For versions prior to 9.2.6.0000, update to version 9.2.6.000...

OpenText eDirectory 安全漏洞

OpenText eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from OpenText Canada. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. A security...

PT-2024-10992

Name of the Vulnerable Software and Affected Versions OpenText eDirectory versions prior to 9.2.6.0000 Description A Possible External Service Interaction attack in eDirectory has been discovered in OpenText eDirectory. Recommendations For versions prior to 9.2.6.0000, update to version 9.2.6.000...

CVE-2021-38132: Server-Side Request Forgery (SSRF)

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000...

CVE-2021-38133: Weak Password Requirements

Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000...

CVE-2024-27903: Unverified Ownership

OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service...

Security Bulletin: IBM Engineering Lifecycle Management is vulnerable to induce the application to perform server-side HTTP and HTTPS requests to arbitrary domains.(CVE-2021-20544)

Summary External service interaction arises when it is possible to induce an application to interact with an arbitrary external service, such as a web or mail server. The ability to trigger arbitrary external service interactions does not constitute a vulnerability in its own right, and in some...

CVE-2022-22364

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrar...

CVE-2022-22364

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrar...

CVE-2022-22364

CVE-2022-22364 affects IBM Controller: 10.4.1, 10.4.2, and 11.0.0. The issue is an External Service Interaction vulnerability caused by improper validation of user-supplied input, allowing a remote attacker to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary...

CVE-2022-22364 IBM Cognos Controller security bypass

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrar...

CVE-2022-22364 IBM Cognos Controller security bypass

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrar...

CVE-2022-22364: Reliance on Reverse DNS Resolution for a Security-Critical Action

IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrar...

CVE-2023-38626

A post-authenticated server-side request forgery SSRF vulnerability in Trend Micro Apex Central 2019 lower than build 6481 could allow an attacker to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-43323

mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, datawallphoto, datauserShareVideo and datauserShareLink...

CVE-2023-43323

mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, datawallphoto, datauserShareVideo and datauserShareLink...

CVE-2023-43323

mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, datawallphoto, datauserShareVideo and datauserShareLink...