CVE-2025-45322

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter...

CVE-2025-45320

A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0...

CVE-2025-45322

Kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter. The root cause is an unvalidated/unsafely constructed input in the CheckStatus.php path, enabling an attacker to inject SQL. Public references (NVD/Red Hat/C...

PT-2025-19717 · Unknown · Kashipara Online Service Management Portal

Name of the Vulnerable Software and Affected Versions: Kashipara Online Service Management Portal version V1.0 Description: A Directory Listing Vulnerability was found in the /osms/Requester/ directory. Recommendations: For Kashipara Online Service Management Portal version V1.0, consider...

CVE-2025-45321

Kashipara Online Service Management Portal V1.0 is affected by a SQL Injection in the /osms/Requester/Requesterchangepass.php endpoint, exploited via the rPassword parameter. The underlying cause is improper handling of this parameter, enabling an attacker to perform injection attacks. CVSS v3.1 ...

CVE-2025-45320

CVE-2025-45320 : A directory listing vulnerability exists in Kashipara Online Service Management Portal v1.0, triggered by mishandling of the /osms/Requester/ directory. This can allow disclosure of directory contents and metadata, impacting confidentiality. Exploitation is not reported in the pr...

CVE-2025-45322

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter...

PT-2025-19718 · Unknown · Kashipara Online Service Management Portal

Name of the Vulnerable Software and Affected Versions: kashipara Online Service Management Portal version V1.0 Description: The issue concerns a SQL Injection vulnerability in the /osms/Requester/Requesterchangepass.php endpoint, specifically via the rPassword parameter. Recommendations: For...

CVE-2025-45321

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter: rPassword...

CVE-2025-45320

A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0...

Security Bulletin: A security vulnerability has been identified in IBM Jazz for Service Management shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2020-4939)

Summary IBM Jazz for Service Management JazzSM is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting JazzSM has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

PT-2025-22265 · Atlassian · Jira Service Management Server +1

Name of the Vulnerable Software and Affected Versions: Jira Core Data Center and Server versions 9.12.0 through 10.5.0 Jira Service Management Data Center and Server versions 5.12.0 through 10.5.0 Description: This is a High severity Privilege Escalation vulnerability that allows an attacker to...

CVE-2025-30729

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications component: Security. Supported versions that are affected are 7.4.0, 7.4.1 and 7.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

PT-2025-16463 · Oracle · Oracle Communications Order/Service Management

Name of the Vulnerable Software and Affected Versions: Oracle Communications Order and Service Management versions 7.4.0 through 7.5.0 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Communications Order and Service Management. Successful...

XXE (XML External Entity Injection) in Jira Service Management Data Center and Server

This High severity XXE XML External Entity Injection vulnerability was introduced in version 5.12.0 of Jira Service Management Data Center and Server. This XXE XML External Entity Injection vulnerability, with a CVSS Score of 7.7, allows an attacker to access local and remote content. Atlassian...

DoS (Denial of Service) net.minidev:json-smart Dependency in Jira Service Management Data Center and Server

This High severity net.minidev:json-smart Dependency vulnerability was introduced in versions 5.12.4, 5.13.0, 5.14.0, 5.15.2, 5.16.0, 5.17.0, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Service Management Data Center and Server. This net.minidev:json-smart Dependency vulnerability,...

Atlassian Jira Service Management Data Center and Server 5.7 < 5.12.19 / 5.13.x < 10.3.4 / 10.4.x < 10.5.0 (JSDSERVER-16086)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16086 advisory. - XStream is a simple library to serialize objects to XML and back again. This vulnerability may allow...

Atlassian Jira Service Management Data Center and Server 5.12.x < 5.12.19 (JSDSERVER-16083)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16083 advisory. - Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn...

Path Traversal (Arbitrary Read/Write) org.springframework:spring-webmvc Dependency in Jira Service Management Data Center and Server

This High severity org.springframework:spring-webmvc Dependency vulnerability was introduced in versions 5.12.0 Jira Service Management Data Center and Server. This org.springframework:spring-webmvc Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

OpenText Service Management Automation X 代码问题漏洞

OpenText Service Management Automation X is advanced service management made easy by OpenText Canada. Based on embedded machine learning and analytics, it provides a smarter approach to IT Service Management ITSM, IT Asset Management ITAM and Enterprise Service Management ESM. A code issue...