CVE-2021-26966

A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Multiple vulnerabilities in the API of AirWave could allow an authenticated remote attacker to conduct SQL injection attacks against the AirWave instance. An attacke...

CVE-2005-2845

Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allows remote attackers to obtain sensitive information...

CVE-2005-2845

Ariba Spend Management System sends the username and password to the server in plaintext in a POST request, which allows remote attackers to obtain sensitive information...

CVE-2005-2845

CVE-2005-2845 affects the Ariba Spend Management System. The issue is that username and password are sent to the server in plaintext via a POST request, enabling remote attackers to obtain sensitive information. The available documents state this plaintext credential exposure but do not provide a...