CVE-2020-4239

IBM Tivoli Netcool Impact 7.1.0.0–7.1.0.17 is affected by CVE-2020-4239, a remote information-disclosure flaw where detailed browser error messages reveal sensitive data. Root cause: information leakage through verbose errors. Impact: potential exposure of confidential information. Remediation: u...

CVE-2020-4239: Generation of Error Message Containing Sensitive Information

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 175412...

PT-2020-17937

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool Impact versions 7.1.0.0 through 7.1.0.17 Description The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in...

CVE-2020-2169

A form validation endpoint in Jenkins Queue cleanup Plugin 1.3 and earlier does not properly escape a query parameter displayed in an error message, resulting in a reflected XSS vulnerability...

Reflected XSS vulnerability in queue-cleanup

A form validation HTTP endpoint in queue-cleanup 1.3 and earlier does not escape a query parameter displayed in an error message. This results in a reflected cross-site scripting vulnerability XSS. queue-cleanup 1.4 correctly escapes the query parameter...

IBM MQ Appliance and IBM MQ Denial of Service Vulnerabilities

IBM MQ IBM WebSphere MQ and IBM MQ Appliance are both products of IBM Corporation, U.S.A. IBM MQ is a messaging middleware product. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA.IBM MQ Appliance is an all-in-one appliance for rapid...

PT-2020-11009

Name of the Vulnerable Software and Affected Versions IBM MQ and IBM MQ Appliance versions 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD Description The issue allows an authenticated user to perform a denial of service attack, which can cause the queue to crash and require a restart. This is due to...

CVE-2019-19381

oauth/oauth2/v1/saml/ in Abacus OAuth Login 201901r4201910210000 before prior to R4 20.11.2019 Hotfix allows Reflected Cross Site Scripting XSS via an error message...

CVE-2019-19381: Improper Neutralization of Input During Web Page Generation

oauth/oauth2/v1/saml/ in Abacus OAuth Login 201901r4201910210000 before prior to R4 20.11.2019 Hotfix allows Reflected Cross Site Scripting XSS via an error message...

PT-2020-10151

Name of the Vulnerable Software and Affected Versions Abacus OAuth Login versions 2019 01 r4 20191021 0000 through prior to R4 20.11.2019 Hotfix Description The issue allows Reflected Cross Site Scripting XSS via an error message. This occurs in the "oauth/oauth2/v1/saml/" endpoint. Recommendatio...

CVE-2020-6206

SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery...

CVE-2019-12446

An issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows Information Exposure through an Error Message...

CVE-2019-12446

An issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows Information Exposure through an Error Message...

Design/Logic Flaw

An issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows Information Exposure through an Error Message...

UBUNTU-CVE-2019-12446

An issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows Information Exposure through an Error Message...

CVE-2019-12446

An issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows Information Exposure through an Error Message...

CVE-2019-12446

The CVE-2019-12446 issue affects GitLab Community and Enterprise Edition versions 8.3 through 11.11, allowing information exposure via an error message. The vulnerability is documented across multiple sources (NVD, Red Hat, Debian, OSV, etc.) with the same flaw description and no detailed root-ca...

CVE-2019-12446

Removed by vendor...

CVE-2019-12446

An issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows Information Exposure through an Error Message...

PT-2020-9327

Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 8.3 through 11.11 Description: An issue was discovered that allows Information Exposure through an Error Message. Recommendations: For versions 8.3 through 11.11, update to a version that...