Lucene search
+L

141 matches found

Cvelist
Cvelist
•added 2021/12/07 12:58 p.m.•33 views

CVE-2021-40096

A cross-site scripting XSS vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via modification of the authorisationUrl in some integration configurations...

5.5AI score0.00798EPSS
SaveExploits0References2
CVE
CVE
•added 2021/12/07 12:58 p.m.•63 views

CVE-2021-40096

CVE-2021-40096 : SquaredUp for SCOM 5.2.1.6654 contains a cross-site scripting (XSS) issue in the integration configuration. The vulnerability allows remote attackers to inject arbitrary web script or HTML by modifying the authorisationUrl in some integration configurations. The description from ...

5.4CVSS5.3AI score0.00798EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/12/07 12:54 p.m.•31 views

CVE-2021-40095

An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptible to a local file inclusion vulnerability when processing remote input in the log files downloaded by an authenticated administrator user, leading to the ability to read...

5.4AI score0.01014EPSS
SaveExploits0References2
CVE
CVE
•added 2021/12/07 12:54 p.m.•74 views

CVE-2021-40095

CVE-2021-40095 affects SquaredUp for SCOM 5.2.1.6654. The issue is a local file inclusion in the Download Log feature under System / Maintenance, triggered when processing remote input in the log files downloaded by an authenticated administrator user. This vulnerability enables reading arbitrary...

4.9CVSS5AI score0.01014EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/12/07 12:51 p.m.•40 views

CVE-2021-40094

A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device...

5.5AI score0.00473EPSS
SaveExploits0References2
CVE
CVE
•added 2021/12/07 12:51 p.m.•61 views

CVE-2021-40094

SquaredUp for SCOM 5.2.1.6654 is affected by a DOM-based cross-site scripting vulnerability. The issue is described across multiple sources as a DOM-based XSS that could allow an attacker to inject malicious code into a user’s device if successfully exploited. The vulnerability is associated with...

5.4CVSS5.3AI score0.00473EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2021/12/07 12:48 p.m.•69 views

CVE-2021-40093

CVE-2021-40093 concerns a cross-site scripting (XSS) vulnerability in the integration configuration of SquaredUp for SCOM 5.2.1.6654 . The exposed issue allows remote attackers to inject arbitrary web script or HTML via dashboard actions. The available documents identify the affected product and ...

5.4CVSS5.3AI score0.00605EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/12/07 12:48 p.m.•42 views

CVE-2021-40093

A cross-site scripting XSS vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via dashboard actions...

5.5AI score0.00605EPSS
SaveExploits0References2
CVE
CVE
•added 2021/12/07 12:42 p.m.•58 views

CVE-2021-40092

The CVE-2021-40092 entry describes a cross-site scripting (XSS) vulnerability in the Image Tile feature of SquaredUp for SCOM 5.2.1.6654. The issue allows remote attackers to inject arbitrary web script or HTML via an SVG file. Connected sources corroborate the same description across multiple fe...

5.4CVSS5.2AI score0.00605EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/12/07 12:42 p.m.•33 views

CVE-2021-40092

A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...

5.5AI score0.00605EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/07 12:00 a.m.•26 views

Squaredup cross-site scripting vulnerabilities

A cross-site scripting vulnerability exists in the integration configuration of SquaredUp for SCOM version 5.2.1.6654, which could be exploited by remote attackers to inject arbitrary web script or HTML via an authorized URL in certain integration configurations. authorized URL in some integratio...

5.4CVSS5.4AI score0.00798EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/07 12:00 a.m.•22 views

Squaredup cross-site scripting vulnerabilities

A cross-site scripting vulnerability exists in Squaredup for SCOM version 5.2.1.6654, which could be exploited by remote attackers to inject malicious code into a user's device...

5.4CVSS5.3AI score0.00473EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/07 12:00 a.m.•9 views

PT-2021-22803

Name of the Vulnerable Software and Affected Versions SquaredUp for SCOM version 5.2.1.6654 Description A DOM-based XSS issue affects the software, potentially allowing attackers to inject malicious code into a user's device if successfully exploited. Recommendations For version 5.2.1.6654, updat...

5.4CVSS0.00473EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2021/12/07 12:00 a.m.•7 views

PT-2021-22801

Name of the Vulnerable Software and Affected Versions SquaredUp for SCOM version 5.2.1.6654 Description A cross-site scripting XSS issue in the Image Tile component allows remote attackers to inject arbitrary web script or HTML via an SVG file. This enables attackers to execute malicious scripts ...

5.4CVSS0.00605EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/07 12:00 a.m.•6 views

CVE-2021-40096: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via modification of the authorisationUrl in some integration configurations...

5.4CVSS5.8AI score0.00798EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/07 12:00 a.m.•21 views

Squaredup cross-site scripting vulnerabilities

Squaredup is a Web service from Squaredup UK that provides data monitoring capabilities for cloud environments. a cross-site scripting vulnerability exists in Image Tile in SquaredUp for SCOM version 5.2.1.6654, which can be exploited by remote attackers to inject arbitrary Web scripts or HTML...

5.4CVSS5.4AI score0.00605EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/07 12:00 a.m.•20 views

Squaredup security vulnerability

Squaredup is a Web service from Squaredup UK that provides data monitoring capabilities for cloud environments. a file inclusion vulnerability in the download logging functionality in SquaredUp for SCOM version 5.2.1.6654 System/Maintenance could be exploited to read arbitrary files on the server...

4.9CVSS5.8AI score0.01014EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/07 12:00 a.m.•5 views

PT-2021-22802

Name of the Vulnerable Software and Affected Versions SquaredUp for SCOM version 5.2.1.6654 Description A cross-site scripting XSS issue in the integration configuration of SquaredUp for SCOM allows remote attackers to inject arbitrary web script or HTML via dashboard actions. Recommendations For...

5.4CVSS0.00605EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/12/07 12:00 a.m.•8 views

PT-2021-22805

Name of the Vulnerable Software and Affected Versions SquaredUp for SCOM version 5.2.1.6654 Description A cross-site scripting XSS issue in integration configuration allows remote attackers to inject arbitrary web script or HTML via modification of the authorisationUrl in some integration...

5.4CVSS0.00798EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/07 12:00 a.m.•7 views

CVE-2021-40092: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...

5.4CVSS5.8AI score0.00605EPSS
SaveExploits0References2
Rows per page
Query Builder