Atos Unify OpenScape 4000 命令注入漏洞

Atos Unify OpenScape 4000 is an enterprise IP communications platform from Atos France. A security vulnerability exists in Atos Unify OpenScape 4000 Assistant that originates from allowing command injection by an authenticated user...

CVE-2023-35031

CVE-2023-35031 affects Atos Unify OpenScape 4000 components: Assistant and Manager in V10 R0 or V10 R1 with prior builds to V10 R1.42.0/V10 R1.34.8. The issue allows command injection by authenticated users, per the CVE entry. CVSS v3.1 base score 8.8 (HIGH); attack vector NETWORK; require LOW pr...

Atos Unify OpenScape 4000 安全漏洞

Atos Unify OpenScape 4000 is an enterprise IP communications platform from Atos France. A security vulnerability exists in Atos Unify OpenScape 4000 Assistant that originates from allowing unauthenticated users to remotely execute code...

usaunify.org Cross Site Scripting vulnerability OBB-3364353

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-30638

Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands...

CVE-2023-30638

Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands...

Command injection

Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands...

CVE-2023-30638

Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands...

PT-2023-22831 · Atos · Atos Unify Openscape Bcf 10 +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape SBC 10 versions prior to 10R3.1.3 Atos Unify OpenScape Branch 10 versions prior to 10R3.1.2 Atos Unify OpenScape BCF 10 versions prior to 10R10.7.0 Description: The issue allows remote authenticated admins to inject...

CVE-2023-30638

Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands...

CVE-2023-30638

CVE-2023-30638 affects Atos Unify OpenScape SBC 10 versions prior to 10R3.1.3, OpenScape Branch 10 versions prior to 10R3.1.2, and OpenScape BCF 10 versions prior to 10R10.7.0. The vulnerability allows remote authenticated admins to inject commands. Public exploitation details are not present in ...

CVE-2023-30638: Improper Neutralization of Special Elements used in a Command

Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands...

CVE-2023-29473

webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710...

CVE-2023-29474

inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23552...

CVE-2023-29475

inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543...

Design/Logic Flaw

inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23552...

Design/Logic Flaw

webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710...

Design/Logic Flaw

inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543...

CVE-2023-29473

webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710...

CVE-2023-29475

inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543...