CVE-2024-12284

CVE-2024-12284 affects Citrix NetScaler Console and NetScaler Agent. The issue is an authenticated privilege escalation via an Arbitrary File Write (ZipSlip) vulnerability in the StyleBook import flow, where an archive is unpacked without validating paths, allowing writing as root and potentially...

CVE-2024-12284 Authenticated privilege escalation

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

CVE-2024-12284 Authenticated privilege escalation

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

CVE-2025-21103

Dell NetWorker Management Console, versions 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contains an improper neutralization of server-side vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability and run arbitrary code on the server...

Citrix Systems NetScaler Console和NetScaler Agent 安全漏洞

Citrix Systems NetScaler Console and Citrix Systems NetScaler Agent are both products of Citrix Systems, U.S.A. Citrix Systems NetScaler Console is a single, unified and centralized cloud-based The Citrix Systems NetScaler Console is a single, unified and centralized cloud-based console Citrix...

IBM Power Hardware Management Console Path Traversal Vulnerability

The IBM Power Hardware Management Console HMC is a suite of graphical interface software from International Business Machines IBM for configuring and managing the Power System family of servers. The software is primarily used to manage hardware such as servers. A path traversal vulnerability exis...

Keycloak allows cross-site scripting (XSS)

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items Resource and Permissions from the admin console, leading to a stored cross-site scripting XSS attack...

GHSA-Q4XQ-445G-G6CH Keycloak allows cross-site scripting (XSS)

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items Resource and Permissions from the admin console, leading to a stored cross-site scripting XSS attack...

CVE-2024-4028

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items Resource and Permissions from the admin console, leading to a stored cross-site scripting XSS attack...

CVE-2024-4028 Keycloak-core: stored xss in keycloak when creating a items in admin console

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items Resource and Permissions from the admin console, leading to a stored cross-site scripting XSS attack...

CVE-2024-4028

CVE-2024-4028 affects Keycloak. The issue allows a privileged attacker to supply a malicious payload as a permission during admin-console item (Resource/Permissions) creation, resulting in stored XSS. Description and related entries consistently describe this XSS path; exploitation details are no...

CVE-2024-4028 Keycloak-core: stored xss in keycloak when creating a items in admin console

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items Resource and Permissions from the admin console, leading to a stored cross-site scripting XSS attack...

Security Bulletin: Vulnerability in expact library (CVE-2024-50602) affects Power HMC.

Summary The expat library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-50602 DESCRIPTION: An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser function because XMLStopParser ca...

Security Bulletin: Vulnerability in Apache Tomcat Server (CVE-2024-52318) affects Power HMC.

Summary The Apache Tomcat Server is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-52318 DESCRIPTION: Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31,...

Security Bulletin: Vulnerabilities in IBM Java SDK (CVE-2024-21217, CVE-2024-21208, CVE-2024-10917) affect Power HMC.

Summary The IBM Java SDK library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-21217 DESCRIPTION: Vulnerability in Java SE component: Serialization. Difficult to exploit vulnerability allows unauthenticated attacker...

NetScaler Console and NetScaler Agent Security Bulletin for CVE-2024-12284

Description of Problem A vulnerability has been discovered in NetScaler Console formerly NetScaler ADM and NetScaler Agent. Refer to below for further details: Affected Versions The following supported versions of NetScaler Console and NetScaler Agent are affected: NetScaler Console 14.1 BEFORE...

PT-2025-6673 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: KeyCloak affected versions not specified Description: A issue was found in KeyCloak that may allow a privileged attacker to use a malicious payload as the permission while creating items from the admin console, leading to a stored cross-site...

PT-2025-6517 · Citrix · Netscaler Console +1

Name of the Vulnerable Software and Affected Versions: NetScaler Console versions 13.1 through 13.1-56.18 NetScaler Console versions 14.1 through 14.1-38.53 NetScaler Agent versions 13.1 through 13.1-56.18 NetScaler Agent versions 14.1 through 14.1-38.53 Description: The issue is related to...

CVE-2025-21103

Dell NetWorker Management Console, versions 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contains an improper neutralization of server-side vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability and run arbitrary code on the server...

CVE-2025-21103

Dell NetWorker Management Console, versions 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contains an improper neutralization of server-side vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability and run arbitrary code on the server...