5351 matches found
CVE-2015-6566: Improper Link Resolution Before File Access
zarafa-autorespond in Zarafa Collaboration Platform ZCP before 7.2.1 allows local users to gain privileges via a symlink attack on /tmp/zarafa-vacation-...
Cross-site Scripting Vulnerability in uCosminexus Portal Framework and Groupmax Collaboration
Overview A cross-site scripting vulnerability was found in uCosminexus Portal Framework and Groupmax Collaboration. Impact Remote users can exploit a cross-site scripting vulnerability to execute malicious scripts. Solution Please refer to the 'Vendor Information' section for the official...
Cisco Prime Collaboration Assurance Default 'cmuser' Credentials (cisco-sa-20151209-pca)
The remote Cisco Prime Collaboration Assurance device is protected by default credentials. This is due to an undocumented account that is created during installation. A remote attacker can exploit this to log in to the system shell with the default 'cmuser' user account, and access the shell with...
Cisco Prime Collaboration Assurance Default Account Credentials Vulnerability
Cisco Prime Collaboration Assurance PCA is a set of enterprise collaboration network management solutions from Cisco. A security vulnerability exists in Cisco PCA prior to version 11.0. A remote attacker could exploit the vulnerability to gain access by creating an SSH session with a known accoun...
Cisco Hosted Collaboration Mediation Fulfillment Information Disclosure Vulnerability
Cisco Hosted Collaboration Mediation Fulfillment HCM-F is a set of software for centralized management of Cisco HCS solutions from Cisco USA. The software provides configuration, management and monitoring of Cisco HCM-F services and other functions. An information disclosure vulnerability exists ...
Code injection
Cisco Hosted Collaboration Mediation Fulfillment 10.63 does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests, aka Bug ID CSCuw84374...
CVE-2015-6404
The CVE-2015-6404 entry concerns Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3), where lack of RBAC in the SOAP API allows an authenticated admin user to retrieve sensitive credentials and other restricted data. Root cause: missing RBAC in the HCM-F SOAP interface. Impact: infor...
CVE-2015-6404: Exposure of Sensitive Information to an Unauthorized Actor
Cisco Hosted Collaboration Mediation Fulfillment 10.63 does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests, aka Bug ID CSCuw84374...
PT-2015-7229
Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Mediation Fulfillment version 10.63 Description The issue allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests. Recommendations For Cisc...
CVE-2015-6389
Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707...
Hardcoded credentials
Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707...
CVE-2015-6389
Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707...
CVE-2015-6389
Cisco Prime Collaboration Assurance before 11.0 is affected by CVE-2015-6389 due to a hardcoded cmuser account. An undocumented default account with a known password enables remote SSH login, granting access with limited permissions. Root cause: installation creates a persistent, unchangeable cmu...
CVE-2015-6389: Improper Authentication
Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707...
PT-2015-7219
Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions prior to 11.0 Description The issue allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of a hardcoded account's password. Recommendations For versions...
Cisco Hosted Collaboration Mediation Fulfillment SOAP API Sensitive Information Disclosure Vulnerability
A vulnerability in the Simple Object Access Protocol SOAP application programming interface API of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an authenticated, remote attacker to obtain sensitive information that should be restricted. The attacker must authentica...
金蝶协作办公系统 /kingdee/tree/tree/news/get_selected.jsp 参数 ids SQL注射
No description provided by source...
金蝶协作办公系统/kingdee/tree/tree/rules/get_selected.jsp 参数 ids SQL注射
No description provided by source...