CVE-2018-8891

CVE-2018-8891 affects BlackBerry UEM’s Management Console. It involves stored cross-site scripting (XSS) vulnerabilities in versions earlier than 12.9.1, allowing an attacker to store script commands that could run in the context of another Management Console administrator. The connected sources ...

CVE-2018-8888

BlackBerry UEM Management Console is affected by a stored XSS in versions earlier than 12.10.0. The vulnerability allows an attacker to store script commands that can later run in the context of another Management Console administrator. Root cause: stored XSS in the console input handling. No rem...

CVE-2018-8892

CVE-2018-8892 describes a cross-site request forgery (CSRF) in the BlackBerry UEM Management Console. Affected product: BlackBerry Unified Endpoint Management (UEM) Management Console. Affected versions: earlier than 12.9.1. Root cause: CSRF allowing changes to UEM settings within an authenticate...

CVE-2018-8891

Multiple stored cross-site scripting XSS vulnerabilities in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8888

A stored cross-site scripting XSS vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.10.0 could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator...

CVE-2018-8892

A cross-site request forgery CSRF vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator...

The management console is unavailable because a root certificate is missing

After upgrading StoreFront from 3.9 to 3.12 CU1 - StoreFront console fails with 'The management console is unavailable because a root certificate is missing'...

CVE-2018-19809

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/GroupCopy.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter...

IBM WebSphere Application Server Cross-Site Request Forgery Vulnerability (CNVD-2018-26215)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for Java EE and Web services applications, and is the foundation of the IBM WebSphere software platform. A cross-site request forgery vulnerability exists in the...

CVE-2018-11076

Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance IDPA 2.0 are affected by an information exposure vulnerability. Avamar Java management console's SSL/TLS private key may be leaked in the Avamar Java management client...

CVE-2018-11076

Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance IDPA 2.0 are affected by an information exposure vulnerability. Avamar Java management console's SSL/TLS private key may be leaked in the Avamar Java management client...

CVE-2018-2483

HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console CMC by changing request method...

CVE-2018-2483

HTTP Verb Tampering is possible in SAP BusinessObjects Business Intelligence Platform, versions 4.1 and 4.2, Central Management Console CMC by changing request method...

CVE-2018-2483

SAP BusinessObjects BI Platform CMC (versions 4.1 and 4.2) is affected by HTTP Verb Tampering caused by how request methods can be manipulated. Vulnerable component: Central Management Console. Reported impact includes bypassing security restrictions and tampering with HTTP verbs. No explicit exp...

Authentication flaw

A vulnerability in the Stealthwatch Management Console SMC of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected system. The vulnerability is due to an insecure system...

CVE-2018-15394

A vulnerability in the Stealthwatch Management Console SMC of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected system. The vulnerability is due to an insecure system...

CVE-2018-15394 Cisco Stealthwatch Management Console Authentication Bypass Vulnerability

A vulnerability in the Stealthwatch Management Console SMC of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected system. The vulnerability is due to an insecure system...

Cisco Stealthwatch Management Console Backup Authentication Bypass Vulnerability

Cisco Stealthwatch Management Console is a data collection and analysis device from cisco. Cisco Stealthwatch Management Console has a share validation bypass vulnerability that is caused by an insecure system configuration. An attacker can exploit this vulnerability by sending a crafted HTTP...

BlackBerry UEM Management Console Information Disclosure Vulnerability

BlackBerry UEM is a unified endpoint management solution from BlackBerry Canada. The solution is used to manage endpoint devices and view their access.Management Console is one of the management console programs. An information disclosure vulnerability exists in Management Console in BlackBerry U...

Information disclosure

An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user...