Lucene search
+L

46 matches found

Cvelist
Cvelist
•added 2026/04/30 9:45 p.m.•56 views

CVE-2026-2311 IBM i is affected by a privilege escalation vulnerability in Web Administration GUI []

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check. A malicious actor could cause user-controlled code to run with administrator privilege...

6.4CVSS0.00198EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/30 9:45 p.m.•89 views

CVE-2026-2311

CVE-2026-2311 affects IBM i releases 7.6, 7.5, 7.4, 7.3, and 7.2. The root cause is an invalid authorization check in the IBM i Web Administration GUI, enabling privilege escalation where a malicious actor could cause user‑controlled code to execute with administrator privileges. Impact is high (...

9.8CVSS5.9AI score0.00198EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/30 12:00 a.m.•4 views

CVE-2026-2311: Improper Access Control

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check. A malicious actor could cause user-controlled code to run with administrator privilege...

9.8CVSS5.8AI score0.00198EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/04/15 2:49 p.m.•25 views

Security Bulletin: IBM i is affected by a privilege escalation vulnerability in Web Administration GUI [CVE-2026-2311]

Summary Web Administration GUI for IBM i is vulnerable to privilege escalation caused by an invalid authorization check as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-2311 DESCRIPTION: IBM i is vulnerable to privilege escalation caused by an invalid IBM i...

9.8CVSS5.9AI score0.00198EPSS
SaveExploits0Affected Software6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2008-5399

Malware in sbrugna...

7.5CVSS6.4AI score0.02583EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2008-4320

Malware in sbrugna...

6.5CVSS6.1AI score0.0205EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2008-5400

Malware in sbrugna...

4.3CVSS6.1AI score0.00316EPSS
SaveExploits0References12
CVE
CVE
•added 2021/04/20 6:30 p.m.•76 views

CVE-2021-28827

CVE-2021-28827 describes a stored cross-site scripting vulnerability in the Administration GUI components of TIBCO Administrator - Enterprise Edition (including Silver Fabric distributions) and TIBCO Runtime Agent (and z/Linux variants). The issue allows an unauthenticated attacker, via social en...

9.6CVSS9AI score0.01102EPSS
SaveExploits0References2Affected Software2
attackerkb
attackerkb
•added 2021/04/20 5:00 p.m.•10 views

CVE-2021-28828

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabri...

8.8CVSS8.2AI score0.00839EPSS
SaveExploits0References3Affected Software3
Positive Technologies
Positive Technologies
•added 2021/04/20 12:00 a.m.•1 views

PT-2021-17949

Name of the Vulnerable Software and Affected Versions: TIBCO Administrator - Enterprise Edition versions 5.11.1 and earlier TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric versions 5.11.1 and earlier TIBCO Administrator - Enterprise Edition for z/Linux versions 5.11....

8.8CVSS0.00839EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/04/20 12:00 a.m.•1 views

PT-2021-17950

Name of the Vulnerable Software and Affected Versions: TIBCO Administrator - Enterprise Edition versions 5.11.1 and below TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric versions 5.11.1 and below TIBCO Administrator - Enterprise Edition for z/Linux versions 5.11.1 an...

8CVSS0.00676EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/20 12:00 a.m.•5 views

CVE-2021-28827: Improper Neutralization of Input During Web Page Generation

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabri...

9.6CVSS5.9AI score0.01102EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/20 12:00 a.m.•7 views

CVE-2021-28829: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabri...

8CVSS6AI score0.00676EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/20 12:00 a.m.•10 views

CVE-2021-28828: Improper Neutralization of Special Elements used in an SQL Command

The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabri...

8.8CVSS6AI score0.00839EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/04/20 12:00 a.m.•5 views

PT-2021-17948

Name of the Vulnerable Software and Affected Versions: TIBCO Administrator - Enterprise Edition versions 5.11.1 and earlier TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric versions 5.11.1 and earlier TIBCO Administrator - Enterprise Edition for z/Linux versions 5.11....

9.6CVSS0.01102EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2020/06/03 5:42 p.m.•16 views

CVE-2020-3229 Cisco IOS XE Software Web UI Privilege Escalation Vulnerability

A vulnerability in Role Based Access Control RBAC functionality of Cisco IOS XE Web Management Software could allow a Read-Only authenticated, remote attacker to execute commands or configuration changes as an Admin user. The vulnerability is due to incorrect handling of RBAC for the administrati...

8.8CVSS7.3AI score0.05325EPSS
SaveExploits0References1
CVE
CVE
•added 2020/06/03 5:42 p.m.•94 views

CVE-2020-3229

CVE-2020-3229 affects Cisco IOS XE Web UI RBAC: an incorrect RBAC handling in the admin GUI may allow a Read-Only authenticated attacker to execute commands or configuration changes as Admin by sending a modified HTTP request. Root cause: RBAC handling flaw in the Web UI. Affected product family:...

9CVSS8.9AI score0.05325EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/06/03 12:00 a.m.•1 views

PT-2020-2684

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Web Management Software affected versions not specified Description A vulnerability in the Role Based Access Control RBAC functionality could allow a Read-Only authenticated, remote attacker to execute commands or configuration...

9CVSS0.05325EPSS
SaveExploits0References7
OSV
OSV
•added 2017/10/19 5:29 p.m.•17 views

CVE-2017-10400

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Administration Graphical User Interface. The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

5.4CVSS5.8AI score0.01212EPSS
SaveExploits0References3
Prion
Prion
•added 2014/07/07 11:01 a.m.•27 views

Improper access control

The Administration GUI in the web framework in Cisco Unified Communications Domain Manager CDM in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID...

9CVSS6.6AI score0.02876EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder