SafeNet SAS OWA Agent Detection (HTTP)

HTTP based detection of the SafeNet Authentication Service SAS Outlook Web Access OWA Agent formerly CRYPTOCard. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Exchange Outlook Web App / Outlook Web Access (OWA) Detection (HTTP)

HTTP based detection of the Microsoft Exchange Outlook Web App / Outlook Web Access OWA and the Microsoft Exchange Server running this OWA application. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2014-5359

Directory traversal vulnerability in SafeNet Authentication Service SAS Outlook Web Access Agent formerly CRYPTOCard before 1.03.30109 allows remote attackers to read arbitrary files via a .. dot dot in the GetFile parameter to owa/owa...

Directory traversal

Directory traversal vulnerability in SafeNet Authentication Service SAS Outlook Web Access Agent formerly CRYPTOCard before 1.03.30109 allows remote attackers to read arbitrary files via a .. dot dot in the GetFile parameter to owa/owa...

CVE-2014-5359

Directory traversal vulnerability in SafeNet Authentication Service SAS Outlook Web Access Agent formerly CRYPTOCard before 1.03.30109 allows remote attackers to read arbitrary files via a .. dot dot in the GetFile parameter to owa/owa...

PT-2014-6433

Name of the Vulnerable Software and Affected Versions SafeNet Authentication Service SAS Outlook Web Access Agent formerly CRYPTOCard versions prior to 1.03.30109 Description The issue allows remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the GetFile parameter...

CVE-2014-5359: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SafeNet Authentication Service SAS Outlook Web Access Agent formerly CRYPTOCard before 1.03.30109 allows remote attackers to read arbitrary files via a .. dot dot in the GetFile parameter to owa/owa...

CVE-2014-9360

XML external entity XXE vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request...

Xxe

XML external entity XXE vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request...

CVE-2014-9360

XML external entity XXE vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request...

CVE-2014-9360

CVE-2014-9360 describes an XML External Entity (XXE) vulnerability in Scalix Web Access, affecting versions 11.4.6.12377 and 12.2.0.14697. The issue allows remote attackers to read arbitrary files and trigger requests to intranet servers through a crafted XML payload. The root cause is an XXE fla...

PT-2014-8959

Name of the Vulnerable Software and Affected Versions Scalix Web Access versions 11.4.6.12377 through 12.2.0.14697 Description The issue allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request. This is due to an XML external entity XXE...

CVE-2014-9360: Undefined Security Weakness

XML external entity XXE vulnerability in Scalix Web Access 11.4.6.12377 and 12.2.0.14697 allows remote attackers to read arbitrary files and trigger requests to intranet servers via a crafted request...

CVE-2014-9352

Cross-site scripting XSS vulnerability in the mail administration login panel in Scalix Web Access 11.4.6.12377 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the mail administration login panel in Scalix Web Access 11.4.6.12377 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-9352

Cross-site scripting XSS vulnerability in the mail administration login panel in Scalix Web Access 11.4.6.12377 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-9352

CVE-2014-9352 affects Scalix Web Access (mail administration login panel) with XXE and XSS vulnerabilities disclosed across multiple databases. OpenVAS describes XXE and XSS in Scalix Web Access <= 11.4.6.12377 and <= 12.x

Microsoft Exchange Server Outlook Web Access URL Redirection (MS14-075; CVE-2014-6336)

A spoofing vulnerability exists in Microsoft Exchange Server. The vulnerability is due to an error in Microsoft Exchange when Microsoft Outlook Web Access OWA fails to properly validate redirection tokens. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Microsoft Exchange Server Outlook Web Access Cross-Site Scripting (MS14-075; CVE-2014-6326)

An elevation of privilege vulnerability exists in Microsoft Exchange Server. The vulnerability is due to an error in Microsoft Exchange input validation. A remote attacker can exploit this issue by enticing a victim to open a specially crafted email with Microsoft Outlook Web Access OWA...

CVE-2014-9352: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the mail administration login panel in Scalix Web Access 11.4.6.12377 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...