Oracle GlassFish Server Administration Console

The remote host is running the Oracle GlassFish application server, and has the administration console listening on an external IP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55929; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Oracle...

IBM WebSphere Application Server 6.1 < 6.1.0.39 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 39 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - Use of an insecure XML encryption algorithm could allow for decryption of JAX-RPC or JAX-WS Web Services requests. PM34841 - A...

Design/Logic Flaw

IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request...

CVE-2011-1356

IBM WebSphere Application Server WAS 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request...

IBM WebSphere crossite request forgery

Crossite request forgery via administration console...

Oracle Java GlassFish Server Security Bypass Vulnerability (May 2011)

Oracle GlassFish Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle GlassFish Server - Administration Console Authentication Bypass

Oracle GlassFish Server Administration Console Authentication Bypass 1. Advisory Information Title: Oracle GlassFish Server Administration Console Authentication Bypass Advisory ID: CORE-2010-1118 Advisory URL: http://www.coresecurity.com/content/glassfishadminauthenticationbypass Date published:...

Citrix Licensing Administration Console Security Bypass And Denial Of Service Vulnerabilities

This host is installed with Citrix Licensing Administration Console and is prone to security bypass and denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbcitrixlicensingadminconsolemultvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Citrix Licensing Administration Console Security...

Citrix License Server Version Detection

This script finds the installed Citrix License Server version. The script logs in via smb, searches for Citrix in the registry and gets the version from SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2011-0316

The Administrative Console component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.15 does not properly restrict access to console servlets, which allows remote attackers to obtain potentially sensitive status information via a direct request...

Symantec IM Manager < 8.4.16 Multiple SQL Injections (SYM10-010)

The version of Symantec IM Manager installed on the remote Windows host is earlier than 8.4.16. Such versions are reportedly affected by multiple SQL injection vulnerabilities in its administration console. An unauthenticated, remote attacker may be able to exploit these issues to compromise the...

IBM WebSphere Application Server 6.0 < 6.0.2.43 Multiple Vulnerabilities

IBM WebSphere Application Server 6.0 before Fix Pack 43 for 6.0.2 appears to be running on the remote host. As such, it is reportedly affected by multiple vulnerabilities : - The Web Container does not properly handle long filenames, which could cause it to respond with the incorrect file,...

IBM WebSphere Application Server (WAS) Cross-site Scripting Vulnerability

The host is running IBM WebSphere Application Server and is prone to Cross-site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodibmwasxssvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ IBM WebSphere Application Server WAS Cross-site Scripting Vulnerability Authors: Antu Sanadi...

IBM WebSphere Application Server XSS Vulnerability (Jul 2010)

IBM WebSphere Application Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only. CPE =...

Kerio Connect < 7.0.0 Products Administration Console File Disclosure and Corruption Vulnerabilities

According to its banner, the remote host is running a version of Kerio Connect or Kerio MailServer as it was formerly known prior to 7.0.0. Successful exploitation of remote file disclosure and corruption vulnerabilities in the administration console of such versions could allow an attacker to...

CVE-2010-0778

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.33 and 7.0 before 7.0.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-0778

CVE-2010-0778 describes an XSS vulnerability in IBM WebSphere Application Server (WAS) Administration Console. Affected products are WAS 6.1 prior to 6.1.0.33 and WAS 7.0 prior to 7.0.0.11. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The under...

CVE-2010-0778

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.33 and 7.0 before 7.0.0.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Kerio MailServer / Connect < 7.0.1 Administration Console File Disclosure and File Corruption Vulnerability

Binary data 5561.prm...

CVE-2010-2103

Cross-site scripting XSS vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary w...