104 matches found
CVE-2022-38655
BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site...
Xxe
BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site...
CVE-2022-38655 HCL BigFix WebUI is affected by a missing-permission-check vulnerability
BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site...
Unauthorized Access Vulnerability in BES Management Console of Beijing Bowland Software Co.
Beijing Bowland Software Co., Ltd. is a high-tech software enterprise specializing in the development and promotion of basic software. An unauthorized access vulnerability exists in the BES management console of Beijing Bowland Software Co., Ltd, which can be exploited by attackers to obtain...
XML Entity Injection Vulnerability in BES Management Console of Beijing Bowland Software Co.
Beijing Bowland Software Co., Ltd. is a high-tech software enterprise specializing in the development and promotion of basic software. An XML entity injection vulnerability exists in the BES management console of Beijing Bowland Software Co., Ltd, which can be exploited by attackers to obtain...
Logic Flaw Vulnerability in BES Management Console of Beijing Bowland Software Co. Ltd (CNVD-2022-48625)
Beijing Bowland Software Co., Ltd. is a high-tech software enterprise specializing in the development and promotion of basic software. A logic flaw vulnerability exists in the BES management console of Beijing Bowland Software Co., Ltd, which can be exploited by attackers to obtain sensitive...
bes-immobilien.de Cross Site Scripting vulnerability OBB-1428317
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bes.seafordbluejays.org XSS vulnerability
Vulnerable URL: http://bes.seafordbluejays.org/apps/news/shownews.jsp?RECID=319404=0=News%20Post%20Ident-A-Kid%20is%20Returning%20to%20Blades!%20-%20Blades%20Elementary%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 15.10.2017 Latest check for...
CVE-2016-6085
IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers...
Cross site request forgery (csrf)
IBM BigFix Platform could allow an attacker on the local network to crash the BES server using a specially crafted XMLSchema request...
CVE-2016-6085
IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers...
IBM BigFix Platform 9.x < 9.1.9 / 9.2.x < 9.2.9 / 9.5.x < 9.5.4 Multiple Vulnerabilities
According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.x prior to 9.1.9, 9.2.x prior to 9.2.9, or 9.5.x prior to 9.5.4. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to a...
CVE-2016-3130
An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server BES 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt...
CVE-2016-3130
CVE-2016-3130 describes an information-disclosure vulnerability in the Core and Management Console of BlackBerry Enterprise Server (BES) . Affected: BES versions 12 through 12.5.2 . The issue allows remote attackers to obtain credentials (local or domain) of an administrator or user by sniffing t...
CVE-2016-3128
CVE-2016-3128 affects the Core of BlackBerry Enterprise Server (BES) versions 12 through 12.5.2. The vulnerability enables remote attackers to enroll an illegitimate device, access device parameters, or send false information to the BES by leveraging information about a legitimately enrolled devi...
IBM BigFix Platform 9.x < 9.1.9.1301 / 9.2.9.36 / 9.5.4.38 Multiple Vulnerabilities
According to its self-reported version, the IBM BigFix Platform application running on the remote host is 9.0.x or 9.1.x prior to 9.1.9.1301, 9.2.x prior to 9.2.9.36, or 9.5.x prior to 9.5.4.38. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exist...
IBM BigFix Server 9.2.x < 9.2.7.53 BES Gather XSS
According to its self-reported version, the IBM BigFix Server running on the remote host is version 9.2.x prior to 9.2.7.53. It is, therefore, affected by a reflected cross-site scripting XSS vulnerability that exists in the BES gather function due to improper validation of input before returning...
BlackBerry Enterprise Service (BES) Management Console 12.x < 12.4.1 Multiple XSS
According to its self-reported version, the BlackBerry Enterprise Service BES management console running on the remote host is prior to 12.4.1. It is, therefore, affected by the following vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of crafted admin...
CVE-2016-3126
Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-1918
Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-1917...