6277 matches found
CVE-2012-0400
EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...
CVE-2012-0401
Multiple SQL injection vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-0402
EMC RSA enVision 4.x before 4.1 Patch 4 uses unspecified hardcoded credentials, which makes it easier for remote attackers to obtain access via unknown vectors...
CVE-2012-0399
EMC RSA enVision 4.x is affected by multiple cross-site scripting (XSS) vulnerabilities identified as CVE-2012-0399, present in versions prior to 4.1 Patch 4. An attacker could inject arbitrary web script or HTML via unspecified vectors, with impact limited to integrity. The documented fix is upg...
CVE-2012-0402
CVE-2012-0402 affects EMC RSA enVision 4.x prior to 4.1 Patch 4, which uses unspecified hardcoded credentials that could allow a remote attacker to gain access via unknown vectors. The vulnerability is within RSA enVision’s authentication surface, with a CVSS Base Score of 9.3 (High) per NVD. Aff...
CVE-2012-0403
EMC RSA enVision 4.x is affected by CVE-2012-0403: a directory traversal vulnerability that enables remote authenticated users to cause an unspecified impact via unknown vectors. Affected product: RSA enVision before 4.1 Patch 4. Root cause and impact are described as directory traversal with a b...
CVE-2012-0400
CVE-2012-0400 affects EMC RSA enVision 4.x (before 4.1 Patch 4). The root cause is improper restriction of the number of failed authentication attempts, enabling brute-force-style remote access. The entry’s impact is a complete breach of confidentiality, integrity, and availability for affected s...
CVE-2012-0403
Directory traversal vulnerability in EMC RSA enVision 4.x before 4.1 Patch 4 allows remote authenticated users to have an unspecified impact via unknown vectors...
CVE-2012-0401
RSA enVision 4.x (EMC) contains multiple SQL injection vulnerabilities tracked as CVE-2012-0401, prior to version 4.1 Patch 4. The issue affects RSA enVision 4.x, with the root cause described as SQL injection in multiple components, permitting remote authenticated users to execute arbitrary SQL ...
PT-2012-2545
Name of the Vulnerable Software and Affected Versions EMC RSA enVision versions 4.0 through 4.1 before Patch 4 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions 4.0 through 4.1 before Patch 4, apply Patch 4 to resolve the issue...
CVE-2012-0400: Improper Authentication
EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...
CVE-2012-0401: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-0403: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in EMC RSA enVision 4.x before 4.1 Patch 4 allows remote authenticated users to have an unspecified impact via unknown vectors...
CVE-2012-0399: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2012-2543
Name of the Vulnerable Software and Affected Versions EMC RSA enVision versions prior to 4.1 Patch 4 Description The issue concerns multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. The exact vectors used for the injection are no...
EMC Documentum eRoom security vulnerabilities
replay attacks and crossite scripting...
SEC Consult SA-20120315-0 :: Multiple permanent XSS vulnerabilities in EMC Documentum eRoom
SEC Consult Vulnerability Lab Security Advisory 20120315-0 ======================================================================= title: Multiple permanent cross-site scripting vulnerabilities product: EMC Documentum eRoom vulnerable version: 7.33.498.98 fixed version: 7.4.4 impact: high homepag...
PT-2012-2544
Name of the Vulnerable Software and Affected Versions EMC RSA enVision versions 4.0 through 4.1 before Patch 4 Description The issue allows remote attackers to gain access through a brute-force attack due to improper restriction of failed authentication attempts. Recommendations For versions 4.0...
CVE-2012-0402: Undefined Security Weakness
EMC RSA enVision 4.x before 4.1 Patch 4 uses unspecified hardcoded credentials, which makes it easier for remote attackers to obtain access via unknown vectors...