CVE-2020-9315

PRODUCT NOT SUPPORTED WHEN ASSIGNED Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE: a related support policy can be found in the www.oracle.com references...

Apache Sling CMS Cross-Site Scripting Vulnerability

Apache Sling CMS is an intuitive, full-featured content management system. A reflected cross-site scripting vulnerability exists in Apache Sling CMS versions prior to 0.16.0. The vulnerability stems from a script in Sling CMS that does not escape the URL's Sling Selector when generating navigatio...

Security Bulletin: IBM FileNet Content Manager and Case Foundation security vulnerability in Administration Console for Content Platform Engine (ACCE)

Summary IBM FileNet Content Manager and Case Foundation have multiple security vulnerabilities in Administration Console for Content Platform Engine ACCE. Vulnerability Details CVEID: CVE-2019-4642 DESCRIPTION: IBM FileNet Content Manager allows web pages to be stored locally which can be read by...

Out of licenses error on License Administration Console

An Out of licenses alert message is received on the License Administration Console LAC...

Citrix Licensing Server Vendor Daemon Stops Intermittently

License Administration Console reports an alert stating the Vendor Daemon is down. The server displays the following error: Citrix XenApp cannot contact the license server And / or Qfarm /Load reports a load of 20000...

Vendor Daemon down on License Administration Console

Vendor Daemon Down Licensing Service Crashes License Administration Console error "Vendor Daemon down: CITRIX" and "No such product or vendor exists: CITRIX" displays...

How to Change the Licensing Port in Citrix Virtual Apps 6

This article describes how to change Licensing Port in Citrix Virtual Apps 6.0 formerly XenApp. In Citrix Virtual Apps 6.0, changing the licensing server port is done in two places sequentially.This article contains both the processes: 1. Discovery Services Console 2. License Server Administratio...

Licensing Error: "Inconsistent Server Host ID"

When importing a license file in the XenApp 6.0 License Administration Console, the following error occurs: Inconsistent server host ID in C:\Program Files x86\Citrix\Licensing\MyFiles\licensexxxxxxx.lic...

License Server does not recognize license file

Installed licenses not showing up on the License Administration Console or Licensing Manager...

User Name and Password Fields are Missing when Configuring a Newly Installed License Server

The License Server Configuration Tool Window does not have the option to enter the username and password for License Administration Console, after the License Server 11.10 is installed. Background Aftersuccessfully installing License Server 11.10, a License Server Configuration Window appears. Th...

PT-2019-6677 · Red Hat · Jboss Application Server

Name of the Vulnerable Software and Affected Versions: JBoss Application Server versions prior to 7.1.0 Beta 1 Description: A DOM based cross-site scripting flaw was found in the administration console of the JBoss Application Server. A remote attacker could provide a specially-crafted web page a...

CVE-2019-18661

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...

CVE-2019-18661

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...

CVE-2019-4271

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin console is vulnerable to a Client-side HTTP parameter pollution vulnerability. IBM X-Force ID: 160243...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server Liberty that affect IBM Spectrum Protect for Workstations Central Administration Console

Summary IBM Spectrum Protect for Workstations formerly Tivoli Storage Manager FastBack for Workstations Central Administration Console requires the dependent product IBM WebSphere Application Server Liberty. Information about security vulnerabilities affecting IBM WebSphere Application Server...

Error: "Detailed license information unavailable"

When accessing the XenDesktop licensing console, you receive the following message: "Detailed license information unavailable" Desktop Studio is unable to retrieve detailed license information from the License Server. This service may not be in use or there aren’t sufficient permissions to access...

The vulnerability of the Oracle Secure Global Desktop administration console allows for the execution of arbitrary code in the user’s browser or access to confidential information.

The vulnerability of Oracle Secure Global Desktop administration consoles exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser or gain access to confidential information...

CVE-2019-0303

SAP BusinessObjects Business Intelligence Platform Administration Console, versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript co...

CVE-2019-0303

SAP BusinessObjects Business Intelligence Platform Administration Console, versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript co...

Code injection

SAP BusinessObjects Business Intelligence Platform Administration Console, versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript co...