Lucene search
+L

587 matches found

Citrix
Citrix
•added 2019/12/27 12:00 a.m.•23 views

License Server does not recognize license file

Installed licenses not showing up on the License Administration Console or Licensing Manager...

7.2AI score
SaveExploits0
Citrix
Citrix
•added 2019/12/27 12:00 a.m.•19 views

Licensing Error: "Inconsistent Server Host ID"

When importing a license file in the XenApp 6.0 License Administration Console, the following error occurs: Inconsistent server host ID in C:\Program Files x86\Citrix\Licensing\MyFiles\licensexxxxxxx.lic...

7.1AI score
SaveExploits0
Citrix
Citrix
•added 2019/12/26 12:00 a.m.•16 views

User Name and Password Fields are Missing when Configuring a Newly Installed License Server

The License Server Configuration Tool Window does not have the option to enter the username and password for License Administration Console, after the License Server 11.10 is installed. Background Aftersuccessfully installing License Server 11.10, a License Server Configuration Window appears. Th...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2019/11/26 12:00 a.m.•18 views

PT-2019-6677 · Red Hat · Jboss Application Server

Name of the Vulnerable Software and Affected Versions: JBoss Application Server versions prior to 7.1.0 Beta 1 Description: A DOM based cross-site scripting flaw was found in the administration console of the JBoss Application Server. A remote attacker could provide a specially-crafted web page a...

5.4CVSS5.3AI score0.01053EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/26 12:00 a.m.•2 views

CVE-2011-3606: Improper Neutralization of Input During Web Page Generation

A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could provide a specially-crafted web page and trick the valid JBoss AS user, with the administrator privilege, to visit it, which would lead into the DO...

5.4CVSS6AI score0.01053EPSS
SaveExploits1References2
NVD
NVD
•added 2019/11/02 2:15 a.m.•31 views

CVE-2019-18661

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...

7.5CVSS7.7AI score0.01505EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2019/11/02 1:17 a.m.•37 views

CVE-2019-18661

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...

7.7AI score0.01505EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/02 12:00 a.m.•8 views

CVE-2019-18661: Improper Authentication

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...

7.5CVSS7.2AI score0.01505EPSS
SaveExploits1References2
OSV
OSV
•added 2019/09/17 7:15 p.m.•13 views

CVE-2019-4271

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin console is vulnerable to a Client-side HTTP parameter pollution vulnerability. IBM X-Force ID: 160243...

3.5CVSS6.1AI score0.00819EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2019/09/12 11:35 p.m.•35 views

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server Liberty that affect IBM Spectrum Protect for Workstations Central Administration Console

Summary IBM Spectrum Protect for Workstations formerly Tivoli Storage Manager FastBack for Workstations Central Administration Console requires the dependent product IBM WebSphere Application Server Liberty. Information about security vulnerabilities affecting IBM WebSphere Application Server...

7.5CVSS0.7AI score0.0322EPSS
SaveExploits0Affected Software2
Citrix
Citrix
•added 2019/08/27 12:00 a.m.•17 views

Error: "Detailed license information unavailable"

When accessing the XenDesktop licensing console, you receive the following message: "Detailed license information unavailable" Desktop Studio is unable to retrieve detailed license information from the License Server. This service may not be in use or there aren’t sufficient permissions to access...

6.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2019/07/04 12:00 a.m.•12 views

The vulnerability of the Oracle Secure Global Desktop administration console allows for the execution of arbitrary code in the user’s browser or access to confidential information.

The vulnerability of Oracle Secure Global Desktop administration consoles exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser or gain access to confidential information...

6.1CVSS6AI score0.20457EPSS
SaveExploits3References3
Prion
Prion
•added 2019/06/14 7:29 p.m.•19 views

Code injection

SAP BusinessObjects Business Intelligence Platform Administration Console, versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript co...

4.3CVSS6.3AI score0.008EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2019/06/14 7:29 p.m.•11 views

CVE-2019-0303

SAP BusinessObjects Business Intelligence Platform Administration Console, versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript co...

6.1CVSS6.4AI score0.008EPSS
SaveExploits0References2
NVD
NVD
•added 2019/06/14 7:29 p.m.•28 views

CVE-2019-0303

SAP BusinessObjects Business Intelligence Platform Administration Console, versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript co...

6.1CVSS6.3AI score0.008EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/06/14 6:50 p.m.•27 views

CVE-2019-0303

SAP BusinessObjects Business Intelligence Platform Administration Console, versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript co...

6.3AI score0.008EPSS
SaveExploits0References2
CVE
CVE
•added 2019/06/14 6:50 p.m.•317 views

CVE-2019-0303

CVE-2019-0303 affects SAP BusinessObjects BI Platform Administration Console (versions 4.2 and 4.3) where the BILogon/appService.jsp redirects reflect the requested errMsg parameter into the response without sanitization, enabling potential cross-site scripting when the URL is accessed. Related c...

6.1CVSS6.4AI score0.008EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/14 12:00 a.m.•5 views

CVE-2019-0303: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Platform Administration Console, versions 4.2, 4.3, module BILogon/appService.jsp is reflecting requested parameter errMsg into response content without sanitation. This could be used by an attacker to build a special url that execute custom JavaScript co...

6.1CVSS5.9AI score0.008EPSS
SaveExploits0References2
Exploit DB
Exploit DB
•added 2019/05/29 12:00 a.m.•299 views

Oracle Application Testing Suite - WebLogic Server Administration Console War Deployment (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Application Testing Suite WebLogic Server Administration Console War Deployment', 'Description' = %q This module abuses a feature in...

7.1CVSS5.2AI score0.29305EPSS
SaveExploits4
zdt
zdt
•added 2019/05/28 12:00 a.m.•181 views

Oracle Application Testing Suite WebLogic Server Administration Console War Deployment Exploit

This Metasploit module abuses a feature in WebLogic Server's Administration Console to install a malicious Java application in order to gain remote code execution. Authentication is required, however by default, Oracle ships with a "oats" account that you could log in with, which grants you...

7.1CVSS0.2AI score0.29305EPSS
SaveExploits4
Rows per page
Query Builder