Lucene search
+L

252 matches found

Cvelist
Cvelist
•added 2021/05/06 12:51 p.m.•33 views

CVE-2021-1530 Cisco BroadWorks Messaging Server XML External Entity Injection Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server Software could allow an authenticated, remote attacker to access sensitive information or cause a partial denial of service DoS condition on an affected system. This vulnerability is due to improper handlin...

5.4CVSS7AI score0.01115EPSS
SaveExploits0References1
CVE
CVE
•added 2021/05/06 12:51 p.m.•57 views

CVE-2021-1530

CVE-2021-1530 – Cisco BroadWorks Messaging Server XML External Entity (XXE) Injection . Affects Cisco BroadWorks Messaging Server Software; vulnerability arises from improper handling of XXE in XML parsing. An authenticated, remote attacker could retrieve local files or cause a partial DoS. Publi...

7.1CVSS6AI score0.01115EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/06 12:00 a.m.•5 views

CVE-2021-1530: Improper Restriction of XML External Entity Reference

A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server Software could allow an authenticated, remote attacker to access sensitive information or cause a partial denial of service DoS condition on an affected system. This vulnerability is due to improper handlin...

7.1CVSS5.9AI score0.01115EPSS
SaveExploits0References3
Cisco
Cisco
•added 2021/05/05 4:00 p.m.•97 views

Cisco BroadWorks Messaging Server XML External Entity Injection Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server Software could allow an authenticated, remote attacker to access sensitive information or cause a partial denial of service DoS condition on an affected system. This vulnerability is due to improper handlin...

5.4CVSS1.1AI score0.01115EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/05/05 4:00 p.m.•11 views

CVE-2021-1530

A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server Software could allow an authenticated, remote attacker to access sensitive information or cause a partial denial of service DoS condition on an affected system. This vulnerability is due to improper handlin...

7.1CVSS6.5AI score0.01115EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/05/05 12:00 a.m.•1 views

PT-2021-2973

Name of the Vulnerable Software and Affected Versions BroadWorks Messaging Server affected versions not specified Description The issue is related to the improper restriction of XML external entity references in the web-based management interface of the BroadWorks Messaging Server. This could all...

7.1CVSS0.01115EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/05/05 12:00 a.m.•16 views

Cisco BroadWorks Messaging Server 代码问题漏洞

Cisco BroadWorks Messaging Server is a database server from the American company Cisco Cisco. An XML external entity injection vulnerability exists in Cisco BroadWorks Messaging Server version 22.0. The vulnerability stems from the program not properly handling XML External Entity XXE entries whe...

7.1CVSS5.8AI score0.01115EPSS
SaveExploits0References4
securityvulns
securityvulns
•added 2010/11/04 12:00 a.m.•71 views

Broadsoft BroadWorks information leak

Incoming and outgoing calls inrofmation is available without authentication...

1.8AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
•added 2010/11/04 12:00 a.m.•106 views

Security-Assessment.com Advisory: BroadWorks Call Detail Record Disclosure Vulnerability

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Name : BroadWorks Call Detail Record Disclosure Vulnerability Vendor Website : http://broadsoft.com/products/broadworks/ Date Released : November 2, 2010 Affected Software: BroadWor...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2010/11/02 12:00 a.m.•47 views

BroadWorks Arbitrary Call Detail Record Eavesdropping

, , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Name : BroadWorks Arbitrary Call Detail Record Eavesdropping Vendor Website : http://broadsoft.com/products/broadworks/ Date Released : November 2, 2010...

SaveExploits0
Exploit DB
Exploit DB
•added 2010/11/02 12:00 a.m.•44 views

BroadWorks - Call Detail Record Security Bypass

source: https://www.securityfocus.com/bid/44597/info BroadWorks is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and to obtain sensitive information. Successful exploits will enable the attacker to monitor the incoming and...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/11/02 12:00 a.m.•43 views

BroadWorks - Call Detail Record Security Bypass

BroadWorks - Call Detail Record Security Bypass source: https://www.securityfocus.com/bid/44597/info BroadWorks is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and to obtain sensitive information. Successful exploits will...

SaveExploits0
Rows per page
Query Builder