CVE-2019-15934

CVE-2019-15934 concerns a cross-site request forgery in Intesync Solismed 3.3sp. The connected sources confirm a CSRF issue in the Solismed web application, but do not provide concrete exploit details, affected versions beyond 3.3sp, or remediation steps. CVSS data from the initial record indicat...

CVE-2019-15933

Intesync Solismed 3.3sp has SQL Injection...

CVE-2019-15933

CVE-2019-15933 affects Intesync Solismed 3.3sp. Public records in multiple feeds describe a SQL injection vulnerability in the application (vulnerable component not explicitly enumerated beyond the product). The CVSS data provided indicates high to critical impact with network access and no authe...

CVE-2019-15932

Intesync Solismed 3.3sp has Incorrect Access Control...

CVE-2019-15932

CVE-2019-15932 affects Intesync Solismed 3.3sp with an improper access control vulnerability. Public sources in CNVD/Red Hat/NVD describe an access control error that could allow information disclosure and privilege elevation. The NVD CVSS metrics indicate high impact (C/I/A High) with network ac...

CVE-2019-15931

Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246...

CVE-2019-15931

CVE-2019-15931 affects Intesync Solismed 3.3sp and is described as a Directory Traversal vulnerability. The available connected documents identify the affected product and vulnerability class but do not provide a detailed root-cause beyond path-handling issues, nor a remediation. NVD metrics for ...

CVE-2019-15930

Intesync Solismed 3.3sp allows Clickjacking...

CVE-2019-15930

CVE-2019-15930: Intesync Solismed 3.3sp is affected by a clickjacking vulnerability. Multiple connected sources describe that an attacker could exploit this flaw to hijack user clicks and perform arbitrary actions on behalf of the user within Solismed. The Red Hat/CNVD/NVD entries corroborate the...

PT-2019-14480 · Intesync · Intesync Solismed

Name of the Vulnerable Software and Affected Versions: Intesync Solismed version 3.3sp Description: The issue is related to cross-site scripting XSS. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized...