Microsoft Exchange Server External Service Interaction

I. VULNERABILITY ------------------------- Microsoft Exchange Server, External Service Interaction DNS Exchange Server 2013 CU22 and previous. II. CVE REFERENCE ------------------------- Not Assigned Yet III. VENDOR ------------------------- https://www.microsoft.com IV. DESCRIPTION...

SAP J2EE Engine/7.01/Fiori Protocol Cross Site Scripting

I. VULNERABILITY ------------------------- SAP J2EE Engine/7.01/Fiori Reflected Cross Site Scripting XSS II. CVE REFERENCE ------------------------- Use CVE-2018-17865 III. VENDOR ------------------------- https://www.sap.com IV. TIMELINE ------------------------- 10/08/2018 Vulnerability...

Zoho ManageEngine OpManager 12.3 SQL Injection Vulnerability

Zoho ManageEngine OpManager versions 12.3 before 123238 suffer from a remote SQL injection vulnerability in the getGraphData API. I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API. II. CVE REFERENCE...

Zoho ManageEngine OpManager 12.3 SQL Injection

I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API. II. CVE REFERENCE ------------------------- CVE-2018-20173 III. VENDOR ------------------------- https://www.manageengine.com IV. TIMELINE...

Zoho ManageEngine OpManager 12.3 Cross Site Scripting Vulnerability

Zoho ManageEngine OpManager versions 12.3 before build 123223 have a cross site scripting vulnerability via the updateWidget API. I. VULNERABILITY ------------------------- Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API. II. CVE REFERENCE...

Envitech Ltd. EnviDAS Ultimate

CVSS v3 8.2 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Envitech Ltd. Equipment: EnviDAS Ultimate Vulnerability: Improper Authentication AFFECTED PRODUCTS The following versions of EnviDAS Ultimate, a web application for environmental monitoring, are affected: EnviDAS...