3028 matches found
Cisco AnyConnect Secure Mobility Client Privilege Escalation (cisco-sa-anyconnect-nam-priv-yCsRNUGT)
The version of Cisco AnyConnect Secure Mobility Client installed on the remote host is prior to 4.10.03104. It is, therefore, affected by a privilege escalation vulnerability in its Network Access Manager NAM module due to incorrect privilege assignment to scripts executed before user logon. An...
CVE-2021-40124
A vulnerability in the Network Access Manager NAM module of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to incorrect privilege assignment to scripts executed before user...
Cisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability
A vulnerability in the Network Access Manager NAM module of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to incorrect privilege assignment to scripts executed before user...
CVE-2021-40124
A vulnerability in the Network Access Manager NAM module of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to incorrect privilege assignment to scripts executed before user...
Advanced Access Manager < 6.8.0 - Admin+ Stored Cross-Site Scripting
The plugin does not escape some of its settings when outputting them, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Put the following payload in any of the plugin's settings with a text input: - v alert/XSS/ - v...
Advanced Access Manager < 6.8.0 - Admin+ Stored Cross-Site Scripting
The plugin does not escape some of its settings when outputting them, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC Put the following payload in any of the plugin's settings with a text input: - v - v "Redirected to...
Security Bulletin: Multiple Security Vulnerabilities Have been addressed in IBM Security Access Manager
Summary Multiple Security Vulnerabilities have been fixed in the IBM Security Access Manager ISAM version 9.0.7.2 Vulnerability Details CVEID: CVE-2019-10208 DESCRIPTION: PostgreSQL is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to the...
Security Bulletin: Vulnerability in IBM HTTP Server used by WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2021-39275)
Summary IBM WebSphere Application Server is shipped with IBM Security Access Manager for Enterprise Single Sign-On. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin...
NetIQ Access Manager Denial of Service Vulnerability
NetIQ Access Manager provides a simple, secure and scalable solution to handle all your web access needs. Whether your users are accessing on-premise or cloud-based services using a cell phone or laptop, Access Manager is secure and provides a single sign-on experience.A denial-of-service...
Vulnerabilities fixed in NetIQ Access Manager
Vulnerabilities have been fixed in Access Manager. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation of data Access to sensitive data Access to system da...
NetIQ Access Manager Cross-Site Scripting Vulnerability
NetIQ Access Manager provides a simple, secure and scalable solution to handle all your web access needs. Whether your users are using a cell phone or laptop to access on-premise or cloud-based services, Access Manager is secure and provides a single sign-on experience.NetIQ Access Manager versio...
NetIQ Access Manager Information Disclosure Vulnerability
NetIQ Access Manager provides a simple, secure and scalable solution to handle all your web access needs. Whether your users are accessing on-premise or cloud-based services using a cell phone or laptop, Access Manager is secure and provides a single sign-on experience. Information disclosure...
NetIQ Access Manager Open Redirect Vulnerability
NetIQ Access Manager provides a simple, secure and scalable solution to handle all your web access needs. Whether your users are using cell phones or laptops to access on-premise or cloud-based services, Access Manager is secure and provides a single sign-on experience. open redirection...
CVE-2021-22528
Reflected Cross Site Scripting XSS vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4...
CVE-2021-22527
Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4...
CVE-2021-22527
Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4...
CVE-2021-22528
Reflected Cross Site Scripting XSS vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4...
CVE-2021-22526
Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4...