CVE-2009-2932

Cross-site scripting XSS vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server Java 7.0 allows remote attackers to inject arbitrary web script or HTML via the TModel Key field...

SAP NetWeaver Cross Site Scripting

http://www.dsecrg.com/pages/vul/show.php?id=133 Digital Security Research Group DSecRG Advisory DSECRG-09-033 Application: SAP NetWeaver Application Server Java Versions Affected: Version 7.0 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 18.03.2009 Vendor response: 19.03.2009 Date ...

[DSECRG-09-033] SAP Netweaver UDDI - XSS Security Vulnerability

http://www.dsecrg.com/pages/vul/show.php?id=133 Digital Security Research Group DSecRG Advisory DSECRG-09-033 Application: SAP NetWeaver Application Server Java Versions Affected: Version 7.0 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 18.03.2009 Vendor response: 19.03.2009 Date ...

SAP NetWeaver Application Server (UDDI client) XSS Vulnerability

Application: SAP NetWeaver Application Server Java Versions Affected: Version 7.0 Vendor URL: Bugs: XSS Exploits: YES Reported: 18.03.2009 Vendor response: 19.03.2009 Date of Public Advisory: 11.08.2009 Reference: SAP Security Note 1322098 Author: Alexandr Polyakov Description SAP NetWeaver...

Design/Logic Flaw

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer...

CVE-2008-2581

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer...

CVE-2008-2581

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer...

CVE-2008-2581

CVE-2008-2581 is an unspecified vulnerability in WebLogic Server (BEA/Oracle Product Suite) affecting multiple WebLogic releases (10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, 7.0 SP7) related to the UDDI Explorer component. The vulnerability is described as having unknown impact and remote attack vector...

CVE-2008-2581: Undefined Security Weakness

Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 has unknown impact and remote attack vectors related to UDDI Explorer...

IBM WebSphere Application Server UDDI控制台多个输入验证漏洞

IBM Websphere Application Server是一款企业性质的WEB应用服务程序。 IBM Websphere Application Server中的UDDI用户控制台对用户提交的输入缺少过滤，远程攻击者可以利用漏洞执行任意脚本代码，窃取COOKIE敏感信息。 问题是对传递给uddigui/navigateTree.do页的eyField, nameField, valueField, frameReturn参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息或执行任意代码。 IBM Websphere Application Server 6.1 .7 I...

CVE-2007-5799

Multiple cross-site request forgery CSRF vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server WAS before 6.1.0 Fix Pack 13 6.1.0.13 allow remote attackers to perform some actions as WAS UDDI users via the 1 keyField, 2 nameField, 3 valueField, an...

CVE-2007-5798

Multiple cross-site scripting XSS vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server WAS before 6.1.0 Fix Pack 13 6.1.0.13 allow remote attackers to inject arbitrary web script or HTML via the 1 keyField, 2 nameField, 3 valueField, and 4...

CVE-2007-5799: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server WAS before 6.1.0 Fix Pack 13 6.1.0.13 allow remote attackers to perform some actions as WAS UDDI users via the 1 keyField, 2 nameField, 3 valueField, an...

CVE-2007-5798

Multiple cross-site scripting XSS vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server WAS before 6.1.0 Fix Pack 13 6.1.0.13 allow remote attackers to inject arbitrary web script or HTML via the 1 keyField, 2 nameField, 3 valueField, and 4...

CVE-2007-5799

CVE-2007-5799 involves multiple cross-site request forgery (CSRF) flaws in the uddigui/navigateTree.do component of IBM WebSphere Application Server’s UDDI user console. The issue allows unauthenticated or remote attackers to perform actions on behalf of UDDI users via the keyField, nameField, va...

CVE-2007-5799

Multiple cross-site request forgery CSRF vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server WAS before 6.1.0 Fix Pack 13 6.1.0.13 allow remote attackers to perform some actions as WAS UDDI users via the 1 keyField, 2 nameField, 3 valueField, an...

WebSphere UDDI Console Multiple Vulnerabilities

Binary data 4273.prm...

webMethods Glue Management Console Directory Traversal

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 11-Apr-2007 Software: webMethods - webMethods Glue Management Console http://www.webmethods.com/ "With webMethods Glue developers can easily create SOAP interfaces for their existing Java and C/C++...

UDDI Detection (HTTP)

The tested Web server seems to be friendly to UDDI requests. The server could be potentially offering web services under some other directory we only tested the web root directory SPDX-FileCopyrightText: 2005 John Lampe Some text descriptions might be excerpted from a referenced sources, and are...

UDDI detection

The tested Web server seems to be friendly to UDDI requests. The server could be potentially offering web services under some other directory we only tested the web root directory OpenVAS Vulnerability Test $Id: uddi.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: UDDI detection Authors: Joh...