Cross-Site Scripting (XSS)

pimcore/data-hub is vulnerable to stored cross-site scripting. The vulnerability exists because the configuration values are not escaped properly which allows a malicious attacker to inject and execute arbitrary javascript...

CVE-2022-0955

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

CVE-2022-0955

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

CVE-2022-0955

Summary: CVE-2022-0955 is a stored Cross-site Scripting (XSS) vulnerability in Pimcore/Data-Hub prior to version 1.2.4. The Red Hat and OSV entries, along with the Pimcore advisories, describe that an admin user accessing Pimcore/Data-Hub could trigger the attack, potentially compromising cookies...

CVE-2022-0955 Cross-site Scripting (XSS) - Stored in pimcore/data-hub

Cross-site Scripting XSS - Stored in GitHub repository pimcore/data-hub prior to 1.2.4...

PT-2022-13554 · Pimcore · Pimcore/Data-Hub

Name of the Vulnerable Software and Affected Versions: pimcore/data-hub versions prior to 1.2.4 Description: The issue is related to stored Cross-site Scripting XSS in the pimcore/data-hub GitHub repository. This type of attack occurs when an application stores user input data without proper...

Pimcore data-hub 跨站脚本漏洞

Pimcore data-hub is a data delivery and consumption platform from Austrian company Pimcore. There is a security vulnerability in Pimcore data-hub, no information about the vulnerability is available at this time, please keep an eye on CNNVD or vendor announcements...

Cross-site Scripting (XSS) - Stored in pimcore/data-hub

Description The pimcore/pimcore package is an open source platform that provides PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce services. stored xss vulnerability occurs when you change the value of Group at "Datahub" in the pimcore service. Proof of Concept XSS POC : " txt 1. Open the...

CVE-2020-6297

Under certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligence, version - 3.0, allows an attacker to access confidential system configuration information, that should otherwise be restricted, leading to Information Disclosure...

CVE-2020-6297

Under certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligence, version - 3.0, allows an attacker to access confidential system configuration information, that should otherwise be restricted, leading to Information Disclosure...

CVE-2020-6297

Under certain conditions the upgrade of SAP Data Hub 2.7 to SAP Data Intelligence, version - 3.0, allows an attacker to access confidential system configuration information, that should otherwise be restricted, leading to Information Disclosure...

CVE-2020-6297

Technical details about CVE-2020-6297 (affected product/version, root cause, exploitability) are not publicly available in the provided documents. Monitor for updates from SAP and CVE trackers.

CVE-2020-6265

SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce Data Hub, versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass the authentication and/or authorization that has been configured by the system administrator due to the use of Hardcoded Credentials...

CVE-2020-6265

SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce Data Hub, versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass the authentication and/or authorization that has been configured by the system administrator due to the use of Hardcoded Credentials...

Hardcoded credentials

SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce Data Hub, versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass the authentication and/or authorization that has been configured by the system administrator due to the use of Hardcoded Credentials...

CVE-2020-6265

CVE-2020-6265 concerns SAP Commerce and SAP Commerce (Data Hub) prior to patched builds. Affected versions include SAP Commerce 6.7, 1808, 1811, 1905 and SAP Commerce (Data Hub) 6.7, 1808, 1811, 1905. The issue arises from the use of hardcoded credentials, allowing an attacker to bypass authentic...

CVE-2020-6265

SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce Data Hub, versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass the authentication and/or authorization that has been configured by the system administrator due to the use of Hardcoded Credentials...

CVE-2019-0390

Under certain conditions SAP Data Hub corrected in DHFoundation version 2 allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users...

CVE-2019-0390

Under certain conditions SAP Data Hub corrected in DHFoundation version 2 allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users...