93 matches found
CVE-2020-7569
Summary (CVE-2020-7569) : EcoStruxure Building Operation WebReports (versions 1.9–3.1) are affected by CWE-434 Unrestricted Upload of File with Dangerous Type. An authenticated remote user could upload arbitrary files due to improper verification of user-supplied files, potentially enabling remot...
CVE-2020-7569: Unrestricted Upload of File with Dangerous Type
A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to upload arbitrary files due to incorrect verification of user supplied files and achieve remote code...
CVE-2020-7572: Improper Restriction of XML External Entity Reference
A CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary XML code and obtain disclosure of confidential data, denial of service, server...
CVE-2020-7571: Improper Neutralization of Input During Web Page Generation
A CWE-79 Multiple Improper Neutralization of Input During Web Page Generation Cross-site Scripting Reflected vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker to inject arbitrary web script or HTML due to incorrect sanitization of use...
Schneider Electric EcoStruxure Building Operation WebReports 代码问题漏洞
Schneider Electric EcoStruxure Building Operation WebReports is a web application for creating, viewing and managing reports. An arbitrary file upload vulnerability exists in Schneider Electric EcoStruxure Building Operation WebReports 1.9-3.1. The vulnerability stems from improper validation of...
Schneider Electric EcoStruxure Building Operation WebReports 跨站脚本漏洞
Schneider Electric EcoStruxure Building Operation WebReports is a web application for creating, viewing and managing reports. A cross-site scripting vulnerability exists in Schneider Electric EcoStruxure Building Operation WebReports 1.9 - 3.1. The vulnerability stems from improper validation of...
Schneider Electric EcoStruxure Building Operation WebReports 跨站脚本漏洞
EcoStruxure Building Operation WebReports is a web application for creating, viewing and managing reports. A cross-site scripting vulnerability exists in EcoStruxure Building Operation WebReports 1.9 - 3.1. The vulnerability stems from improper validation of user-supplied data. A remote attacker...
CVE-2020-7573: Improper Access Control
A CWE-284 Improper Access Control vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker being able to access a restricted web resources due to improper access control...
Schneider Electric EcoStruxure Building Operation WebReports 安全漏洞
EcoStruxure Building Operation WebReports is a web application for creating, viewing and managing reports. An improper access control vulnerability exists in EcoStruxure Building Operation WebReports 1.9 - 3.1. A remote attacker could exploit this vulnerability to access restricted web resources...
Schneider Electric EcoStruxure Building Operation WebReports 代码问题漏洞
EcoStruxure Building Operation WebReports is a web application for creating, viewing and managing reports. An improperly restricted XML external entity reference vulnerability exists in EcoStruxure Building Operation WebReports 1.9 - 3.1. The vulnerability stems from a misconfiguration of the XML...
CVE-2020-7570: Improper Neutralization of Input During Web Page Generation
A CWE-79 Improper Neutralization of Input During Web Page Generation Cross-site Scripting Stored vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to inject arbitrary web script or HTML due to incorrect...
PT-2020-5822
Name of the Vulnerable Software and Affected Versions: EcoStruxure Building Operation WebReports versions 1.9 through 3.1 Description: The issue is related to insufficient protection of the web page structure, allowing a remote attacker to inject arbitrary web script or HTML due to incorrect...
PT-2020-5821
Name of the Vulnerable Software and Affected Versions: EcoStruxure Building Operation WebReports versions 1.9 through 3.1 Description: A Cross-site Scripting stored vulnerability exists due to improper neutralization of input during web page generation, allowing an authenticated remote user to...
PT-2020-5823
Name of the Vulnerable Software and Affected Versions: EcoStruxure Building Operation WebReports versions 1.9 through 3.1 Description: A vulnerability exists due to improper restriction of XML external entity references, allowing an authenticated remote user to inject arbitrary XML code. This cou...
PT-2020-5820
Name of the Vulnerable Software and Affected Versions: EcoStruxure Building Operation WebReports versions V1.9 through V3.1 Description: A vulnerability exists due to the incorrect verification of user-supplied files, allowing an authenticated remote user to upload arbitrary files and achieve...
CVE-2016-0397
WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...
CVE-2016-0397
WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...
Design/Logic Flaw
WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic...