CVE-2014-0126

Cross-site request forgery CSRF vulnerability in enrol/imsenterprise/importnow.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that import an IMS Enterprise file...

CVE-2013-5420

The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request...

Design/Logic Flaw

The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request...

CVE-2013-5420

IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2’s IMS server prior to Ifix 6 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request. This vulnerability affects ISAM ESSO 8.2 prior to Ifix 6; the exact root cause is not ...

CVE-2013-5420

The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request...

CVE-2013-5421

Cross-site scripting XSS vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote attackers to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form...

CVE-2013-6745

Cross-site scripting XSS vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form...

Cross site scripting

Cross-site scripting XSS vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote attackers to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form...

Cross site scripting

Cross-site scripting XSS vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form...

CVE-2013-5421

CVE-2013-5421 is an XSS vulnerability in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2, affecting the IMS server prior to Ifix 6. The issue arises from crafted input to an unspecified dynamic web form, allowing remote attackers to inject arbitrary web script or HTML. T...

CVE-2013-6745

Cross-site scripting XSS vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form...

CVE-2013-6745

CVE-2013-6745 describes an XSS vulnerability in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2, affecting the IMS Server before Ifix 6. An attacker with valid authentication could inject arbitrary script/HTML through a crafted input to an unspecified dynamic web form, p...

CVE-2013-4938

The CVE-2013-4938 issue affects Moodle’s IMS-LTI mod_form prior to certain releases. The vulnerability arises because the sendname, sendemailaddr, and acceptgrades privacy settings are not properly enforced, allowing remote attackers to obtain sensitive information in opportunistic environments w...

Updated moodle package fixes multiple security vulnerabilities

Flash files distributed with the YUI library in Moodle before 2.4.5 may have allowed for cross-site scripting attacks MSA-13-0025. Privacy settings for the IMS-LTI External tool module in Moodle before 2.4.5 were not able to be changed so personal information was always transferred MSA-13-0026...

CVE-2013-3003

Unspecified vulnerability in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 allows remote authenticated users to execute arbitrary commands via unknown vectors...

Code injection

Unspecified vulnerability in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 allows remote authenticated users to execute arbitrary commands via unknown vectors...

CVE-2013-3003

Unspecified vulnerability in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 allows remote authenticated users to execute arbitrary commands via unknown vectors...

CVE-2013-3003

The IBM IMS Enterprise Suite SOAP Gateway (versions 1.1, 2.1, 2.2) is affected by CVE-2013-3003, among others, with a remote attacker able to execute arbitrary commands. The IBM bulletin specifies that SOAP Gateway users are authenticated via OS credentials and exploitation is constrained by the ...

CVE-2013-0483

The login component in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 uses cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

Design/Logic Flaw

The login component in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 uses cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...