CVE-2021-40091

An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...

CVE-2021-40091

An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...

Server side request forgery (ssrf)

An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...

CVE-2021-40091

CVE-2021-40091 describes an SSRF vulnerability in SquaredUp for SCOM 5.2.1.6654 . The affected product is SquaredUp for SCOM; the root cause is an SSRF issue. Impact details from the entry include high severity with network attack vector and low attack complexity, with both confidentiality, integ...

CVE-2021-40091

An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...

CVE-2021-40091: Server-Side Request Forgery (SSRF)

An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...

Squaredup 代码问题漏洞

Squaredup is a Web service from Squaredup UK that provides data monitoring capabilities for cloud environments. SSRF vulnerabilities exist in SquaredUp for SCOM, and no detailed vulnerability details are available...

SquaredUp Cross-Site Request Forgery Vulnerability

Squaredup is a web service from Squaredup UK that provides data monitoring capabilities for cloud environments. A cross-site request forgery vulnerability exists in SquaredUp versions prior to 4.6.0, which can be exploited by an attacker to execute arbitrary code...

Squaredup Cross-Site Scripting Vulnerability

Squaredup is a web service from Squaredup UK that provides data monitoring capabilities for cloud environments. A cross-site scripting vulnerability exists in SquaredUp versions prior to 4.6.0, which can be exploited by a user to create a dashboard, execute malicious content in an iframe, or uplo...

Squaredup has an unspecified vulnerability

Squaredup, a Web service from Squaredup UK that provides data monitoring capabilities for cloud environments, has a security vulnerability that could be exploited by attackers to guess a valid user name...

CVE-2020-9389

A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious user to guess valid username due to a different response time from invalid usernames...

CVE-2020-9390

SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content in iframe or by uploading an SVG that contained a script...

CVE-2020-9388

CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administrator executing arbitrary code in a HTML dashboard tile via a crafted HTML page, or by uploading a malicious SVG payload into a dashboard...

CVE-2020-9390

SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content in iframe or by uploading an SVG that contained a script...

CVE-2020-9389

A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious user to guess valid username due to a different response time from invalid usernames...

CVE-2020-9389

A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious user to guess valid username due to a different response time from invalid usernames...

Cross site scripting

SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content in iframe or by uploading an SVG that contained a script...

Cross site request forgery (csrf)

CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administrator executing arbitrary code in a HTML dashboard tile via a crafted HTML page, or by uploading a malicious SVG payload into a dashboard...

CVE-2020-9389

A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious user to guess valid username due to a different response time from invalid usernames...

CVE-2020-9389

SquaredUp CVE-2020-9389 affects SquaredUp before version 4.6.0. The vulnerability is a username enumeration flaw caused by a timing-based difference in login responses, enabling a malicious user to guess valid usernames. CVSS v3.1 base score is 3.7 (LOW) with network attack vector and high attack...