CVE-2022-24378

Improper initialization in the IntelR Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-24378

CVE-2022-24378 affects Intel® Data Center Manager software prior to version 4.1. The issue is an improper initialization in the managed component that may allow an authenticated user to cause a denial of service via local access. Consequences are limited to DoS as described in the sources; no oth...

CVE-2022-24378

Improper initialization in the IntelR Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-23182

Improper access control in the IntelR Data Center Manager software before version 4.1 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-23182

The CVE-2022-23182 issue affects Intel® Data Center Manager software prior to version 4.1. It is described as improper access control that could allow an unauthenticated user to potentially escalate privileges via adjacent access. Red Hat and Intel advisories corroborate the same description and ...

Intel Data Center Manager 安全漏洞

Intel Data Center Manager is a software solution from Intel Corporation. It collects and analyzes real-time operating conditions, power, and heat of various devices in the data center to help improve efficiency and uptime. A security vulnerability exists in Intel Data Center Manager software...

Intel Data Center Manager 输入验证错误漏洞

Intel Data Center Manager is a software solution from Intel Corporation. It collects and analyzes real-time operating conditions, power, and heat of various devices in the data center to help improve efficiency and uptime. A security vulnerability exists in Intel Data Center Manager software prio...

Intel Data Center Manager 安全漏洞

Intel Data Center Manager is a software solution from Intel Corporation. It collects and analyzes real-time operating conditions, power, and heat of various devices in the data center to help improve efficiency and uptime. A security vulnerability exists in Intel Data Center Manager software prio...

Intel Data Center Manager 安全漏洞

Intel Data Center Manager is a software solution from Intel Corporation. It collects and analyzes real-time operating conditions, power, and heat from various devices in the data center to help improve efficiency and uptime. A security vulnerability exists in Intel Data Center Manager software...

CVE-2022-21225

Improper neutralization in the IntelR Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

PT-2022-14935 · Intel · Intel Data Center Manager Sdk

Name of the Vulnerable Software and Affected Versions: IntelR Data Center Manager versions prior to 4.1 Description: The issue is related to improper neutralization in the software, which may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-21225

Intel Data Center Manager (DCM) before version 4.1 is affected by CVE-2022-21225 due to improper neutralization, allowing an authenticated user with adjacent access to escalate privileges. CVSS v3.1 base score 8.0 (HIGH); attack vector: Adjacent; privileges required: Low; user interaction: None; ...

PT-2022-15978 · Intel · Intel Data Center Manager Sdk

Name of the Vulnerable Software and Affected Versions: IntelR Data Center Manager versions prior to 4.1 Description: The issue is related to improper input validation, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For versions pri...

CVE-2022-21225

Improper neutralization in the IntelR Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

Critical severity command injection vulnerability - CVE-2022-36804

h3. Command injection vulnerability through malicious HTTP requests There is a command injection vulnerability in multiple API endpoints of Bitbucket Server and Data Center. An attacker with access to a public Bitbucket repository or with read permissions to a private one can execute arbitrary co...

The vulnerability of the Discovery component of the Device42 data center infrastructure management software allows a perpetrator to execute arbitrary code.

The vulnerability of the Discovery component of the Device42 data center infrastructure management software is related to the implementation or modification of arguments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by creating an auto-detection task nix/CISCO...

The vulnerability of the db_optimize() function (applmgr/applmgrsite/views.py) in the Device42 data center infrastructure management software allows a perpetrator to execute arbitrary commands.

The vulnerability of the dboptimize function in the Device42 data center infrastructure management software exists because measures to neutralize special elements used in the operating system commands have not been implemented. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the TeamManagement.jspa component in the Atlassian Jira Server and Data Center data processing system allows a perpetrator to execute arbitrary code.

The vulnerability of the TeamManagement.jspa component of the Atlassian Jira Server and Data Center processing system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2022-36801

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting RXSS vulnerability in the TeamManagement.jspa endpoint. The affected versions are before version 8.20.8...

CVE-2022-36801

CVE-2022-36801 affects Atlassian Jira Server and Data Center prior to 8.20.8. The issue is a Reflected XSS in the TeamManagement.jspa endpoint that allows anonymous remote attackers to inject arbitrary HTML or JavaScript. Several sources corroborate the affected version range and the vulnerabilit...