PT-2020-9396

Name of the Vulnerable Software and Affected Versions: CoSoSys Endpoint Protector version 5.1.0.2 Description: The issue allows Host Header Injection. Recommendations: For CoSoSys Endpoint Protector version 5.1.0.2, update to a version that fixes the Host Header Injection issue. At the moment,...

CVE-2019-13285: Improper Neutralization of Special Elements in Output Used by a Downstream Component

CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection...

CVE-2019-12425

Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...

CVE-2019-12425

Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...

Design/Logic Flaw

Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...

CVE-2019-12425

CVE-2019-12425 affects Apache OFBiz 17.12.01 and is described as a Host header injection vulnerability caused by accepting arbitrary Host headers. This is documented across multiple sources (e.g., NVD entry and Red Hat, CNVD, OSV, CVE lists) with the consistent description that OFBiz 17.12.01 is ...

CVE-2019-12425

Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...

CVE-2019-12425

Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...

PT-2020-9311

Name of the Vulnerable Software and Affected Versions: Apache OFBiz version 17.12.01 Description: The issue concerns Host header injection, where the software accepts arbitrary host headers. This can potentially lead to various security issues. Recommendations: For Apache OFBiz version 17.12.01, ...

CVE-2019-12425: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host...

CVE-2020-11814

A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites...

CVE-2020-11814

A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites...

Design/Logic Flaw

A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites...

CVE-2020-11814

A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites...

CVE-2020-11814

CVE-2020-11814 describes a Host Header Injection in qdPM 9.1 that can allow an attacker to spoof a header and redirect users to malicious sites. Connected sources (Red Hat, CNVD, CVE.org, NVD, PRION, etc.) confirm the issue but do not provide detailed technical exploit steps, affected component g...

PT-2020-12863

Name of the Vulnerable Software and Affected Versions qdPM version 9.1 Description A Host Header Injection issue may allow an attacker to spoof a particular header and redirect users to malicious websites. Recommendations For qdPM version 9.1, update to a version that includes a fix for this issu...

CVE-2020-11814: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites...

Cisco Webex Business Suite Data Forgery Issue Vulnerability

Cisco Webex Business Suite is a set of video conferencing solutions from the U.S. company Cisco Cisco. A data forgery vulnerability exists in Cisco Webex Business Suite versions prior to 39.1.0, which stems from the program failing to properly validate the 'host' field in the message header. An...

CVE-2019-1866

Cisco Webex Business Suite before 39.1.0 contains a vulnerability that could allow an unauthenticated, remote attacker to affect the integrity of the application. The vulnerability is due to improper validation of host header values. An attacker with a privileged network position, either a...

CVE-2019-1866 Cisco Webex Business Suite Host Header Value Integrity Vulnerability

Cisco Webex Business Suite before 39.1.0 contains a vulnerability that could allow an unauthenticated, remote attacker to affect the integrity of the application. The vulnerability is due to improper validation of host header values. An attacker with a privileged network position, either a...