CVE-2015-0161

IBM Security SiteProtector System is affected by CVE-2015-0161: SQL injection in SiteProtector 3.0 (before 3.0.0.7), 3.1 (before 3.1.0.4), and 3.1.1 (before 3.1.1.2). An authenticated remote user can execute arbitrary SQL commands via unspecified vectors, potentially affecting the back-end databa...

CVE-2015-0168

Cross-site scripting XSS vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0171

Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to write to arbitrary files via unspecified vectors...

CVE-2015-0169

CVE-2015-0169 affects IBM Security SiteProtector System 3.0 (pre-3.0.0.7), 3.1 (pre-3.1.0.4), and 3.1.1 (pre-3.1.1.2). A vulnerability exists where remote authenticated users can inject arguments via unspecified vectors, potentially affecting server integrity. IBM’s consolidated advisory lists th...

CVE-2015-0168

IBM Security SiteProtector System is affected by CVE-2015-0168 (XSS) affecting versions 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2. The vulnerability arises from improper validation that could allow remote authenticated users to inject scripts, potentially stealing cookies b...

CVE-2015-0161

SQL injection vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-0170

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows local users to obtain sensitive information by reading cached data...

CVE-2015-0169

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arguments via unspecified vectors...

CVE-2015-0160

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to execute arbitrary commands with SYSTEM privileges via unspecified vectors...

CVE-2015-0170

Affected software: IBM Security SiteProtector System 3.0 (before 3.0.0.7), 3.1 (before 3.1.0.4), and 3.1.1 (before 3.1.1.2). Vulnerability: local users can read cached data to obtain sensitive information (information disclosure). Impact: partial confidentiality impact as per NVD entry. Root caus...

CVE-2015-0160

CVE-2015-0160 affects IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2. An authenticated remote user could execute arbitrary commands with SYSTEM privileges via unspecified vectors. The IBM Security bulletin provides remediation: apply the eXPress...

IBM Security SiteProtector System Cross-Site Scripting Vulnerability

IBM Security SiteProtector System is a centralized management system that unifies the management and analysis of network, server and endpoint security agents. A cross-site scripting vulnerability exists in IBM Security SiteProtector System. This vulnerability could be exploited by an attacker to...

IBM Security SiteProtector Security Bypass Vulnerability

IBM Security SiteProtector System is a centralized management system that unifies the management and analysis of network, server and endpoint security agents. A security vulnerability exists in IBM Security SiteProtector. The vulnerability allows an attacker to bypass certain security restriction...

IBM Security SiteProtector System Remote Command Execution Vulnerability

IBM Security SiteProtector System is a centralized management system that unifies the management and analysis of network, server and endpoint security agents. A remote command execution vulnerability exists in IBM Security SiteProtector System. This vulnerability allows attackers to execute...

IBM Security SiteProtector System Local Information Disclosure Vulnerability

IBM Security SiteProtector System is a centralized management system that unifies the management and analysis of network, server and endpoint security agents. IBM Security SiteProtector System local information disclosure vulnerability. This vulnerability could be exploited by an attacker to obta...

IBM Security SiteProtector System Local Elevation of Privilege Vulnerability

IBM Security SiteProtector System is a centralized management system that unifies the management and analysis of network, server and endpoint security agents. A local elevation of privilege vulnerability exists in IBM Security SiteProtector System. This vulnerability could be exploited to allow a...

Microsoft Secure Channel CVE-2014-6321 Remote Code Execution Vulnerability

Description Microsoft Secure Channel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the target server. Failed exploit attempts will result in denial-of-service conditions. Technologies Affected Avaya Aura...

IBM Web Application Firewall Bypass

Exploit for windows platform in category remote exploits IBM Web Application Firewall Bypass Version: 1.0 Vendor: IBM Product: IBM Web Application Firewall These capabilities are included through SiteProtector 7.0 and later software within IBM Security Network IPS GX products, IBM Security Server...

IBM Web Application Firewall Bypass

Trustwave's SpiderLabs Security Advisory TWSL2011-006: IBM Web Application Firewall Bypass https://www.trustwave.com/spiderlabs/advisories/TWSL2011-006.txt Published: 2011-06-21 Version: 1.0 Vendor: IBM Product: IBM Web Application Firewall These capabilities are included through SiteProtector 7....

IBM Security SiteProtector (ISS) Deployment Manager Detection (HTTP)

HTTP based detection of the IBM Security SiteProtector ISS Deployment Manager. SPDX-FileCopyrightText: 2005 David Maciejak SPDX-FileCopyrightText: New code/product registration code since 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...