642 matches found
Design/Logic Flaw
SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed...
CVE-2021-31222
SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration console installed...
CVE-2021-31221
SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed...
CVE-2021-31223
SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed...
Code injection
SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed...
CVE-2021-31221
SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed...
CVE-2021-31222
SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration console installed...
CVE-2021-31225
SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...
CVE-2021-31225
SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...
CVE-2021-31225
SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...
Code injection
SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...
CVE-2021-31225
CVE-2021-31225 affects Stormshield SES Evolution prior to 2.1.0. The issue allows deleting resources not currently in use by any security policy by leveraging access to a computer with the administration console installed. The impact relates to resource deletion with partial integrity and availab...
CVE-2021-31225
SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...
PT-2021-19207
Name of the Vulnerable Software and Affected Versions SES Evolution versions prior to 2.1.0 Description The issue allows updating some parts of a security policy by leveraging access to a computer having the administration console installed. Recommendations For versions prior to 2.1.0, update to...
PT-2021-19210
Name of the Vulnerable Software and Affected Versions SES Evolution versions prior to 2.1.0 Description The issue allows an attacker with access to a computer having the administration console installed to delete certain resources not currently in use by any security policy. Recommendations For...
CVE-2021-31222: Undefined Security Weakness
SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration console installed...
CVE-2021-31221: Undefined Security Weakness
SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed...
CVE-2021-31225: Undefined Security Weakness
SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...
PT-2021-19206
Name of the Vulnerable Software and Affected Versions SES Evolution versions prior to 2.1.0 Description The issue allows an attacker to delete parts of a security policy by exploiting access to a computer with the administration console installed. Recommendations For SES Evolution versions prior ...
CVE-2021-28973
The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks...