182 matches found
CVE-2014-8916
CVE-2014-8916 affects IBM OpenPages GRC Platform 6.2–7.1. The vulnerability is a cross-site scripting (XSS) issue caused by improper validation of user-supplied input, exploitable by remote authenticated users through a crafted URL to run script in a victim’s browser. Affected versions include 6....
CVE-2015-0142
IBM OpenPages GRC Platform (versions 6.2–7.1) is affected by CVE-2015-0142 due to insufficient access checks for the System Administration Mode function, allowing remote authenticated users to transition to maintenance mode and trigger a data-storage outage. The vulnerability affects 6.2 before I...
CVE-2015-0144
IBM OpenPages GRC Platform is affected by CVE-2015-0144 (XSS) across versions 6.2 (before IF7) through 7.1 (before FP1). The issue arises from improper validation of user-supplied input, allowing a remote authenticated user to inject and execute web scripts via a crafted URL, potentially stealing...
CVE-2015-0142
IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to cause a denial of service maintenance-mode transition and data-storage outage by calling the System Administration Mode function...
CVE-2014-8916
Cross-site scripting XSS vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0144...
CVE-2015-0143
IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to obtain sensitive information by reading error messages...
IBM OpenPages GRC Platform Cross-Site Request Forgery Vulnerability
IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms for managing enterprise risk and compliance challenges. A cross-site request forgery vulnerability exists in IBM OpenPages GRC Platform that allows a remote attacker to construct a malicious URI, trick a user into...
IBM OpenPages GRC Platform Security Restriction Bypass Vulnerability
IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms for managing enterprise risk and compliance challenges. The IBM OpenPages GRC Platform failed to perform adequate access checks on JSON requests, allowing a remote attacker to exploit a vulnerability to change user...
CVE-2014-4633
Cross-site scripting XSS vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
ESA-2014-071: RSA Archer® GRC Platform Multiple Vulnerabilities
ESA-2014-071.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-071: RSA Archer® GRC Platform Multiple Vulnerabilities EMC Identifier: ESA-2014-071 CVE Identifier: CVE-2014-2517, CVE-2014-2505, CVE-2014-0640, CVE-2014-0641 Severity Rating: CVSS v2 Base Score: See below for individual scor...
CVE-2014-2505
EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product's functionality, via unspecified vectors...
CVE-2014-2517
Unspecified vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to gain privileges via unknown vectors...
CVE-2014-0641
Cross-site request forgery CSRF vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the authentication of arbitrary users...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the authentication of arbitrary users...
CVE-2014-2505
EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product's functionality, via unspecified vectors...
CVE-2014-2517
Unspecified vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to gain privileges via unknown vectors...
CVE-2014-0641
The CVE-2014-0641 issue affects EMC RSA Archer GRC Platform 5.x (up to 5.5 SP1). It is a Cross-Site Request Forgery (CSRF) vulnerability that could allow a remote attacker to hijack an authenticated user’s session in the victim’s browser by enticing the user to click crafted links or similar acti...
CVE-2011-1381
Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended access restrictions via unknown vectors...