15 matches found
CVE-2026-65310
ANDRITZ HIPASE-250 formerly 250 SCALA, in the default configuration of affected versions, exposes its data and configuration endpoint without any authentication and permissive CORS on every response. An unauthenticated attacker with network access can read live process values and server...
CVE-2026-65311
The HTTP server component of ANDRITZ HIPASE-250 formerly 250 SCALA in affected versions exposes an undocumented endpoint that changes the server's logging level and target without requiring authentication. A remote, unauthenticated attacker with network access to the service may suppress audit...
CVE-2026-65309
ANDRITZ HIPASE-250 formerly 250 SCALA in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attacker able to read the credential store or capture network traffic to recover all stored passwords...
EUVD-2026-51501
The HTTP server component of ANDRITZ HIPASE-250 formerly 250 SCALA in affected versions exposes an undocumented endpoint that changes the server's logging level and target without requiring authentication. A remote, unauthenticated attacker with network access to the service may suppress audit...
CVE-2026-65311
The CVE-2026-65311 entry concerns the HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA). Affected versions expose an undocumented, unauthenticated endpoint that can modify the server’s logging level and target. This allows a remote attacker with network access to suppress audit log...
CVE-2026-65310
ANDRITZ HIPASE-250 formerly 250 SCALA, in the default configuration of affected versions, exposes its data and configuration endpoint without any authentication and permissive CORS on every response. An unauthenticated attacker with network access can read live process values and server...
EUVD-2026-51500
ANDRITZ HIPASE-250 formerly 250 SCALA, in the default configuration of affected versions, exposes its data and configuration endpoint without any authentication and permissive CORS on every response. An unauthenticated attacker with network access can read live process values and server...
CVE-2026-65310 Missing authentication and permissive CORS policy
ANDRITZ HIPASE-250 formerly 250 SCALA, in the default configuration of affected versions, exposes its data and configuration endpoint without any authentication and permissive CORS on every response. An unauthenticated attacker with network access can read live process values and server...
CVE-2026-65309
ANDRITZ HIPASE-250 formerly 250 SCALA in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attacker able to read the credential store or capture network traffic to recover all stored passwords...
CVE-2026-65309 Storage of passwords in a reversible format
ANDRITZ HIPASE-250 formerly 250 SCALA in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attacker able to read the credential store or capture network traffic to recover all stored passwords...
CVE-2026-65309
The CVE-2026-65309 entry concerns ANDRITZ HIPASE-250 (formerly 250 SCALA). Affected versions store and transmit user passwords in a reversible format rather than as a one-way hash, enabling an attacker who can access the credential store or network traffic to recover stored passwords. Reported CV...
EUVD-2026-51488
ANDRITZ HIPASE-250 formerly 250 SCALA in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attacker able to read the credential store or capture network traffic to recover all stored passwords...
andritz.secureveal.com Cross Site Scripting vulnerability OBB-1311618
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
andritz.heinzelmaennchen.at XSS vulnerability
Open Bug Bounty ID: OBB-672751 Description| Value ---|--- Affected Website:| andritz.heinzelmaennchen.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Unfixed XSS vulnerability at www.andritz.com
Security researcher Fabian Fingerle, has submitted on 14/02/2008 a cross-site-scripting XSS vulnerability affecting www.andritz.com, which at the time of submission ranked 467524 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is...