1144 matches found
Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Process Manager, WebSphere Process Server and WebSphere Lombardi Edition (CVE-2016-8934)
Summary WebSphere Application Server is shipped as a component of IBM Business Process Manager, WebSphere Process Server, and WebSphere Lombardi Edition. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability...
Security Bulletin: Potential cross-site scripting in the Admin Console for WebSphere Application Server (CVE-2016-8934)
Summary There is a potential cross-site scripting vulnerability in the Admin Console for WebSphere Application Server. Vulnerability Details CVEID: CVE-2016-8934 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...
Security Bulletin: Information Disclosure in IBM WebSphere Application Server in the Admin Console (CVE-2016-0377)
Summary There is an Information Disclosure Vulnerability in IBM WebSphere Application Server that affects the Administrative Console. Vulnerability Details CVEID: CVE-2016-0377 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to obtain sensitive information caused by th...
WEM Admin console error: "A valid license server with appropriate licenses needs to be configured"
When attempting to connect to infrastructure services using the WEM Administration Console, the following error is seen: A valid license server with appropriate licenses needs to be configured before you can start using Citrix Workspace Environment Management...
IBM WebSphere Application Server Information Disclosure Vulnerability (CNVD-2018-09191)
IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. A security vulnerability exists in IBM WAS that stems from t...
Micro Focus Novell Access Manager Admin Console and IDP Server Open Redirect Vulnerability
Micro Focus Novell Access Manager is a comprehensive Web access management solution from Micro Focus, U.K. Admin Console is one of the management consoles, and IDP servers are one of the IDP servers. A security vulnerability exists in the Micro Focus Novell Access Manager Admin Console and IDP...
CVE-2017-14802
Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to trigger unvalidated redirects to third party sites...
CVE-2017-14802
CVE-2017-14802 affects Micro Focus Novell Access Manager Admin Console and IDP servers prior to version 4.3.3, which expose an unvalidated redirect vulnerability that could be exploited by remote attackers to redirect users to third‑party sites. The public records indicate impacted products are N...
CVE-2017-14801 Reflected xss in Admin Console REST interface
Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using the url parameter...
IBM WebSphere Application Server 7.0.0.0 < 7.0.0.45 / 8.0.0.0 < 8.0.0.15 / 8.5.0.0 < 8.5.5.14 / 9.0.0.0 < 9.0.0.7 Admin Console Unspecified Insecure Security Remote Privilege Escalation
The IBM WebSphere Application Server running on the remote host is version 7.0.0.0 prior to 7.0.0.45, 8.0.0.0 prior to 8.0.0.15, 8.5.0.0 prior to 8.5.5.14, or 9.0.0.0 prior to 9.0.0.7. It is, therefore, affected by an unspecified privilege escalation vulnerability in the Admin Console. An...
NetIQ Access Manager Admin Console File Upload Vulnerability
NetIQ Access Manager NAM is a resource access control solution from NetIQ Corporation. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users.Admin Console is one of the management console programs. A file upload vulnerability exists ...
CVE-2018-1342
A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console...
CVE-2018-1342
A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console...
Design/Logic Flaw
A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console...
CVE-2018-1342
The CVE-2018-1342 issue affects NetIQ Access Manager Admin Console (versions 4.3/4.4). The root cause is lack of validation in the FwRequest class, enabling an attacker to upload arbitrary files to the Admin Console server and execute code, with no authentication required (remote code execution)....
CVE-2018-1342
A Vulnerability exists on Admin Console where an attacker can upload files to the Admin Console server, and potentially execute them. This impacts NetIQ Access Manager versions 4.3 and 4.4 as well as the Administrative console...
CVE-2016-6810
CVE-2016-6810 affects Apache ActiveMQ 5.x prior to 5.14.2, where the web-based administration console is vulnerable to cross-site scripting due to improper user data output validation. The issue could allow a remote attacker to execute script in a victim’s browser via the admin console URL. Remed...
CVE-2017-5261
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to all authenticated users...
