IBM Campaign Cross-Site Scripting Vulnerability

IBM Campaign formerly known as Unica Campaign is a management solution from IBM in the United States used to help marketers design, execute, measure, and optimize marketing advertising. A cross-site scripting vulnerability exists in IBM Campaign. A remote attacker could exploit the vulnerability ...

IBM InfoSphere Information Server Framework and IBM InfoSphere Information Server on Cloud Clickjacking Vulnerability

IBM InfoSphere Information Server Framework ISF and IBM InfoSphere Information Server on Cloud are products of IBM Corporation, USA. The former is a set of data integration platform framework, the latter is a set of cloud-based data integration platform. A clickjacking vulnerability exists in IBM...

Novell Micro Focus GroupWise Multiple Cross Site Scripting (CVE-2016-5760)

A cross-site scripting vulnerability has been reported in the administrator console of Micro Focus GroupWise. The vulnerability is due to failure to properly sanitize user-supplied input. A remote attacker can exploit this vulnerability by enticing a target user to click on a specially crafted UR...

Novell Micro Focus GroupWise Multiple Cross Site Scripting (CVE-2016-5760)

A cross-site scripting vulnerability has been reported in the administrator console of Micro Focus GroupWise. The vulnerability is due to failure to properly sanitize user-supplied input. A remote attacker can exploit this vulnerability by enticing a target user to click on a specially crafted UR...

CVE-2016-0246

Cross-site scripting XSS vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-0246

Cross-site scripting XSS vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cisco Unified Intelligence Center Cross-Site Scripting Vulnerability

Cisco Unified Contact Center Express Unified CCX and Cisco Unified Intelligence Center CUIC are both products of Cisco, Inc. Unified CCX is a customer relationship management component of a unified communications solution; CUIC is a web-based reporting platform. Unified CCX is a customer...

CVE-2016-6436

Cross-site scripting XSS vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682...

CVE-2016-6425

Cross-site scripting XSS vulnerability in Cisco Unified Intelligence Center CUIC 8.5.4 through 9.11, as used in Unified Contact Center Express 10.01 through 11.01, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuy75020 and CSCuy81652...

Cross site scripting

Cross-site scripting XSS vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unified Intelligence Center CUIC 8.5.4 through 9.11, as used in Unified Contact Center Express 10.01 through 11.01, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuy75020 and CSCuy81652...

CVE-2016-6425

Cisco CUIC is affected by a cross-site scripting (XSS) vulnerability in CUIC versions 8.5.4 through 9.1(1) when used with Unified CCX 10.0(1) through 11.0(1). The issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL, due to insufficient input validation. Cisco’s ...

CVE-2016-6436

Cross-site scripting XSS vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz14682...

CVE-2016-6418

Cross-site scripting XSS vulnerability in Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552...

CVE-2016-6418

Cross-site scripting XSS vulnerability in Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552...

Directory traversal

Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure aka LWI, as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL...

CVE-2016-6038

CVE-2016-6038 describes a directory-traversal vulnerability in the Eclipse Help component of Tivoli Lightweight Infrastructure (LWI) used by IBM System Director Console for AIX (pConsole) and WebSM Remote. Affected: IBM AIX releases 5.3, 6.1, 7.1 with vulnerable LWI filesets; specifically sysmgt....

CVE-2016-6038

Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure aka LWI, as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL...