CVE-2016-6859

Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java stack trace...

CVE-2016-6859

CVE-2016-6859 concerns SAP Hybris’ Hybris Management Console (HMC) prior to version 6.0. An information disclosure vulnerability allows remote attackers to trigger an error and read a Java stack trace, potentially exposing sensitive information. Affected component is the HMC within SAP Hybris; ro...

CVE-2016-6859: Exposure of Sensitive Information to an Unauthorized Actor

Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java stack trace...

PT-2016-7150

Name of the Vulnerable Software and Affected Versions SAP Hybris versions prior to 6.0 Description The issue allows remote attackers to obtain sensitive information by triggering an error and then reading a Java stack trace in the Hybris Management Console HMC of SAP Hybris. Recommendations For...

CVE-2016-2961

The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace...

CVE-2016-2961

The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace...

CVE-2016-2961: Exposure of Sensitive Information to an Unauthorized Actor

The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace...

PT-2016-5306

Name of the Vulnerable Software and Affected Versions IBM Integration Bus versions 9.0.0.0 through 9.0.0.5 IBM Integration Bus versions 10.0.0.0 through 10.0.0.4 WebSphere Message Broker versions 8.0.0.0 through 8.0.0.7 Description The issue allows remote attackers to obtain sensitive Tomcat...

Stack overflow

McAfee Network Data Loss Prevention NDLP before 9.3 allows local users to obtain sensitive information by reading a Java stack trace...

CVE-2014-8526

McAfee Network Data Loss Prevention NDLP before 9.3 allows local users to obtain sensitive information by reading a Java stack trace...

CVE-2014-8526

McAfee Network Data Loss Prevention (NDLP) prior to version 9.3 is affected by a local information-disclosure vulnerability where an attacker can read a Java stack trace to obtain sensitive information. The available documents confirm the affected product and symptom (stack trace exposure) and th...

PT-2014-8589

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description The issue allows local users to obtain sensitive information by reading a Java stack trace. Recommendations For versions prior to 9.3, update to version 9.3 or later to...

CVE-2014-8526: Exposure of Sensitive Information to an Unauthorized Actor

McAfee Network Data Loss Prevention NDLP before 9.3 allows local users to obtain sensitive information by reading a Java stack trace...

CVE-2013-0520

IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data...

Design/Logic Flaw

IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data...

CVE-2013-0520

IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data...

PT-2013-2401

Name of the Vulnerable Software and Affected Versions IBM Sterling Secure Proxy versions 3.2.0 through 3.3.01 before 3.3.01.23 Interim Fix 1 IBM Sterling Secure Proxy versions 3.4.0 through 3.4.0.5 IBM Sterling Secure Proxy versions 3.4.1 through 3.4.1.6 Description The issue allows remote...

CVE-2013-0520: Improper Input Validation

IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data...

Eclipse BIRT 2.2.1 Cross Site Scripting

Eclipse BIRT &r=-703171660 HTTP/1.1 Host: localhost:8780 User-Agent: Mozilla/5.0 Windows; U; Windows NT 5.1; en-US; rv:1.8.1.18 Gecko/20081029 Firefox/2.0.0.18 Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,/;q=0.5 Accept-Language: en-us,en;q=0.5...

Eclipse BIRT <= 2.2.1 xss

Exploit for unknown platform in category web applications ========================= Eclipse BIRT &r=-703171660 HTTP/1.1 Host: localhost:8780 User-Agent: Mozilla/5.0 Windows; U; Windows NT 5.1; en-US; rv:1.8.1.18 Gecko/20081029 Firefox/2.0.0.18 Accept:...