CVE-2009-1729

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...

CVE-2009-1729

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...

CVE-2009-1729

CVE-2009-1729 corresponds to multiple XSS flaws in Sun Java System Communications Express 6.2 (2005Q4) and 6.3. The vulnerabilities are in the Personal Address Book Add Contact path (uwc/abs/search.xml) via abperson_displayName and in UWCMain (uwc/base/UWCMain) via temporaryCalendars. Impact is c...

CORE-2009-0109 - Multiple XSS in Sun Communications Express

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple XSS in Sun Communications Express 1. Advisory Information Title: Multiple XSS in Sun Communications Express Advisory ID: CORE-2009-0109 Advisory URL:...

Core Security Technologies Advisory 2009.0109

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple XSS in Sun Communications Express 1. Advisory Information Title: Multiple XSS in Sun Communications Express Advisory ID: CORE-2009-0109 Advisory URL:...

Sun Java System Communications Express 6.3 - 'search.xml' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34154/info Sun Java System Communications Express is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Sun Java System Communications Express 6.3 - 'UWCMain' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34155/info Sun Java System Communications Express is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This issue is tracked by Sun Alert ID 258068. An attacker may leverage this issue to execute...

Sun Java System Communications Express 6.3 - search.xml Cross-Site Scripting

Sun Java System Communications Express 6.3 - search.xml Cross-Site Scripting source: https://www.securityfocus.com/bid/34154/info Sun Java System Communications Express is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may...

Sun Java System Communications Express 6.3 - UWCMain Cross-Site Scripting

Sun Java System Communications Express 6.3 - UWCMain Cross-Site Scripting source: https://www.securityfocus.com/bid/34155/info Sun Java System Communications Express is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This issue is tracke...

Multiple XSS in Sun Communications Express

Advisory ID Internal CORE-2009-0109 1. Advisory Information Title: Multiple XSS in Sun Communications Express Advisory ID: CORE-2009-0109 Advisory URL:https://www.coresecurity.com/core-labs/advisories/sun-communications-express Date published: 2009-05-20 Date of last update: 2009-05-20 Vendors...

Hardcoded credentials

Nortel MG1000S, Signaling Server, and Call Server on the Communications Server 1000 CS1K 4.50.x contain multiple unspecified hard-coded accounts and passwords, which allows remote attackers to gain privileges...

Design/Logic Flaw

Unspecified vulnerability in the "session limitation technique" in the FTP service on Nortel Communications Server 1000 CS1K 4.50.x, when running on VGMC or signaling nodes, allows remote attackers to cause a denial of service resource exhaustion and failed updates via unknown vectors that causes...

CVE-2009-0630

The 1 Cisco Unified Communications Manager Express; 2 SIP Gateway Signaling Support Over Transport Layer Security TLS Transport; 3 Secure Signaling and Media Encryption; 4 Blocks Extensible Exchange Protocol BEEP; 5 Network Admission Control HTTP Authentication Proxy; 6 Per-user URL Redirect for...

Authentication flaw

The 1 Cisco Unified Communications Manager Express; 2 SIP Gateway Signaling Support Over Transport Layer Security TLS Transport; 3 Secure Signaling and Media Encryption; 4 Blocks Extensible Exchange Protocol BEEP; 5 Network Admission Control HTTP Authentication Proxy; 6 Per-user URL Redirect for...

CVE-2009-0630

The 1 Cisco Unified Communications Manager Express; 2 SIP Gateway Signaling Support Over Transport Layer Security TLS Transport; 3 Secure Signaling and Media Encryption; 4 Blocks Extensible Exchange Protocol BEEP; 5 Network Admission Control HTTP Authentication Proxy; 6 Per-user URL Redirect for...

Can social networks foster security?

It’s a departure from the stance that most people are taking these days when it comes to issues of social networking and security, but some industry players are pitching the idea eweek.com that the ever-more-popular communications applications could someday replace more traditional messaging...

CVE-2009-0632

The IP Phone Personal Address Book PAB Synchronizer feature in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.1, 4.2 before 4.23SR4b, 4.3 before 4.32SR1b, 5.x before 5.13e, 6.x before 6.13, and 7.0 before 7.02 sends privileged directory-service account credentials to the...

Code injection

The IP Phone Personal Address Book PAB Synchronizer feature in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.1, 4.2 before 4.23SR4b, 4.3 before 4.32SR1b, 5.x before 5.13e, 6.x before 6.13, and 7.0 before 7.02 sends privileged directory-service account credentials to the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the 1 Full Name or 2 Subject field...

CVE-2009-0632

The IP Phone Personal Address Book PAB Synchronizer feature in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.1, 4.2 before 4.23SR4b, 4.3 before 4.32SR1b, 5.x before 5.13e, 6.x before 6.13, and 7.0 before 7.02 sends privileged directory-service account credentials to the...