460 matches found
Input validation
There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...
CVE-2020-9200
The CVE-2020-9200 issue affects Huawei iManager NetEco 6000 (V600R021C00). The root cause is insufficient input validation during CSV-related operations, enabling a CSV injection vulnerability in the target device. Exploitation is characterized as a local attack with low privileges and no user in...
CVE-2020-9200
There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...
Huawei Imanager Neteco 6000 信息泄露漏洞
Huawei Imanager Neteco 6000 is a platform from China's Huawei that provides a management approach for data center infrastructure. The platform can implement unified management for medium-sized and large data centers and multiple data centers, and improve resource utilization in data centers by...
CVE-2020-29667
In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system because of Insufficient Session Expiration...
Security Advisory - CSV Injection Vulnerability in iManager NetEco Product
There has a CSV injection vulnerability in iManager NetEco Product. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV...
Huawei Imanager Neteco 6000 注入漏洞
Huawei Imanager Neteco 6000 is a platform from China's Huawei that provides a management approach for data center infrastructure. The platform can implement unified management for medium-sized and large data centers and multiple data centers, and improve resource utilization in data centers by...
Huawei Data Communication: RCE Vulnerability in Fastjson (huawei-sa-20191204-01-fastjson)
A remote code execution RCE vulnerability exists in the open- source JSON parsing library Fastjson. This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...
Huawei Data Communication: Security Vulnerability (huawei-sa-20200131-01-jin)
Huawei iManager N2510 devices are prone to a security vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Huawei Data Communication: Security Vulnerability (huawei-sa-20200115-01-ds)
Huawei iManager N2510 devices are prone to a security vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Huawei Data Communication: Privilege Escalation Vulnerability in Some Huawei Products (huawei-sa-20181010-01-debug)
A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Micro Focus NetIQ iManager Cross-Site Scripting Vulnerability
Micro Focus NetIQ iManager is a WEB-based application from Micro Focus UK. The program can manage, configure eDirectory objects using wireless devices. A cross-site scripting vulnerability exists in Micro Focus NetIQ iManager versions prior to 3.1 SP2, which can be exploited by remote attackers t...
Cross site scripting
Cross site scripting vulnerability in iManager prior to 3.1 SP2...
CVE-2018-17949
Cross site scripting vulnerability in iManager prior to 3.1 SP2...
CVE-2018-17949
Cross site scripting vulnerability in iManager prior to 3.1 SP2...
CVE-2018-17949
Cross site scripting vulnerability in iManager prior to 3.1 SP2...
CVE-2018-17949
The CVE-2018-17949 entry corresponds to a cross-site scripting (XSS) vulnerability in Micro Focus NetIQ iManager prior to version 3.1 SP2. The cited CNVD/NVD records describe it as a web-based iManager vulnerability that can be exposed via the iManager web interface, with remote exposure and impa...
Cross site scripting
NetIQ iManager 3.1.1 addresses potential XSS vulnerabilities...