PT-2019-17009 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 7.0 through 9.0 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a...

PT-2019-17010 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 7.0 through 9.0 Description: The Admin console of the IBM WebSphere Application Server is affected by a Client-side HTTP parameter pollution issue. Recommendations: For versions 7.0 through 9.0, updat...

Security Bulletin: Cross-site scripting vulnerability in WebSphere Application Server Admin Console (CVE-2019-4270)

Summary There is a potential denial of service in the Admin Console of WebSphere Application Server. Vulnerability Details CVEID: CVE-2019-4270 DESCRIPTION: IBM WebSphere Application Server Admin Console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...

Security Bulletin: Path traversal vulnerability in WebSphere Application Server Admin Console (CVE-2019-4442)

Summary There is a path traversal vulnerability in the Admin Console of WebSphere Application Server. Vulnerability Details CVEID: CVE-2019-4442 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to traverse directories on the file system. An attacker could send a...

Veeam Availability Console v3 Patch 3 (build 2762)

Challenge Veeam Availability Console v3 Patch 3 build 2762. This update supersedes Veeam Availability Console v3 Patch 2 build 2725. Cause Please confirm you are running version 3.0.0.2647 or later prior to installing this Patch 3. You can check this under Windows Programs and features. After...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server Liberty that affect IBM Spectrum Protect for Workstations Central Administration Console

Summary IBM Spectrum Protect for Workstations formerly Tivoli Storage Manager FastBack for Workstations Central Administration Console requires the dependent product IBM WebSphere Application Server Liberty. Information about security vulnerabilities affecting IBM WebSphere Application Server...

CVE-2019-3638

Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway MWG 7.8.x prior to 7.8.2.13 allows remote attackers to collect sensitive information or execute commands with the MWG administrator's credentials via tricking the administrator to click on a carefully...

Cross site scripting

Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway MWG 7.8.x prior to 7.8.2.13 allows remote attackers to collect sensitive information or execute commands with the MWG administrator's credentials via tricking the administrator to click on a carefully...

CVE-2019-3638

CVE-2019-3638 describes a reflected cross-site scripting flaw in the Administrators web console of McAfee Web Gateway (MWG) versions 7.8.x prior to 7.8.2.13. The vulnerability allows an attacker to induce an administrator to click a crafted link, potentially exposing sensitive information or exec...

PT-2019-16643 · Mcafee · Mcafee Web Gateway

Name of the Vulnerable Software and Affected Versions: McAfee Web Gateway versions 7.8.x prior to 7.8.2.13 Description: The issue allows remote attackers to collect sensitive information or execute commands with the administrator's credentials by tricking the administrator into clicking on a...

IBM WebSphere Application Server Path Traversal Vulnerability (CNVD-2019-30959)

IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A path traversal vulnerability exists in the Admin Console in IBM...

IBM WebSphere Application Server HTTP Parameter Contamination Vulnerability

IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. An HTTP parameter contamination vulnerability exists in the Admin...

LibreNMS Cross-Site Scripting Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL. The system features customizable alerts , auto-discovery of the network environment and automatic updates . A cross-site scripting vulnerability exists in the Create User Inventory Add Device Notifications Alert Rule...

VulnCheck KEV: CVE-2007-1036

The default configuration of JBoss does not restrict access to the 1 console and 2 web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests...

CVE-2019-15230

LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account...

CVE-2019-15230

LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account...

Design/Logic Flaw

LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account...

CVE-2019-15230

LibreNMS v1.54 has XSS in the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account...

CVE-2019-15230

CVE-2019-15230 affects LibreNMS v1.54, with a cross-site scripting (XSS) vulnerability in the admin console modules Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template. The flaw allows an authenticated attacker to inject client-side scripts, poten...

Cross-Site Scripting (XSS)

LibreNMS is vulnerable to cross-site scripting XSS. An authenticated user can inject malicious script through the Create User, Inventory, Add Device, Notifications, Alert Rule, Create Maintenance, and Alert Template sections of the admin console...