29 matches found
Red Database ServerTraceManager initServerTrace Concealment
The vulnerability of the ServerTraceManager::initServerTrace function in the ServerTraceManager.cpp module of the “Red Database” database management system is related to the loss of information that is crucial for ensuring security. Exploiting this vulnerability could allow a malicious actor to...
CVE-2023-40262
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...
CVE-2023-40263
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated command injection via ftp...
CVE-2023-40264
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated path traversal in the user interface...
CVE-2023-40264
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated path traversal in the user interface...
CVE-2023-40262
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...
Path traversal
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated path traversal in the user interface...
Cross site scripting
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...
Command injection
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated command injection via ftp...
CVE-2023-40264: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated path traversal in the user interface...
CVE-2023-40263: Improper Neutralization of Special Elements used in a Command
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated command injection via ftp...
CVE-2023-40263
Summary: CVE-2023-40263 affects Atos Unify OpenScape Voice Trace Manager on versions prior to V8 R0.9.11 and enables an authenticated command injection via FTP. The Red Hat and NVD entries corroborate the vulnerability details and indicate a high-severity impact with network access and low privil...
PT-2024-12872
Name of the Vulnerable Software and Affected Versions Atos Unify OpenScape Voice Trace Manager versions prior to V8 R0.9.11 Description An issue was discovered in the administration component of Atos Unify OpenScape Voice Trace Manager, allowing unauthenticated Stored Cross-Site Scripting XSS via...
CVE-2023-40262
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...
Atos Unify OpenScape Cross-Site Scripting Vulnerability
Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A cross-site scripting vulnerability exists in Atos Unify OpenScape Voice Trace Manager V8 V8 prior to R0.9.11, which stems from a vulnerability that allows unauthenticated cross-site scripting attacks in t...
Atos Unify OpenScape Path Traversal Vulnerability
Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A path traversal vulnerability exists in Atos Unify OpenScape Voice Trace Manager V8 V8 prior to R0.9.11, which stems from allowing authenticated path traversal in the user interface...
CVE-2023-40262
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...
CVE-2023-40262: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...
CVE-2023-40264
CVE-2023-40264 affects Atos Unify OpenScape Voice Trace Manager for versions prior to V8 R0.9.11. The issue is an authenticated path traversal vulnerability accessible via the user interface. The connected sources confirm the affected software and the root cause as a UI path traversal, with no ex...