SAP Management Console security vulnerabilities

Information leakage, DoS...

CVE-2010-0115

Symantec Web Gateway 4.5 (before 4.5.0.376) contains a SQL injection in login.php’s USERNAME parameter in the GUI management console. The vulnerability allows remote attackers to inject arbitrary SQL into backend queries, potentially affecting data confidentiality, integrity, and availability. So...

HP Power Manager formLogin buffer overflow

Added: 12/28/2010 CVE: CVE-2010-4113 OSVDB: 69969 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability in the Administration interface allows remote attackers to...

HP Systems Insight Control Detection

HP Systems Insight Control implements infrastructure management and has the ability to deploy, migrate, monitor, control, and optimize IT infrastructure through a management console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50539; scriptversion"1.7";...

Artica Detection

Artica, a web-based management console for Postfix, is installed on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50323; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Artica Detection"; scriptsummaryenglish:"Looks for...

Cross-site Request Forgery Vulnerability in Oracle iPlanet Web Server

Overview Oracle iPlanet Web Server formerly Sun Java System Web Server contains a cross-site request forgery vulnerability. Oracle iPlanet Web Server formerly Sun Java System Web Server is a web server. Oracle iPlanet Web Server contains a cross-site request forgery vulnerability. Yoshihiro...

JVN#50133036: Cross-site Request Forgery Vulnerability in Oracle iPlanet Web Server

Oracle iPlanet Web Server formerly Sun Java System Web Server is a web server. Oracle iPlanet Web Server contains a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged into the Oracle iPlanet Web Server management console, an arbitrary instance may be...

CVE-2010-3544

Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect integrity and availability via unknown vectors related to Administration. NOTE: the previous information was obtained from the October...

CVE-2010-3544

CVE-2010-3544 is a CSRF vulnerability in Oracle iPlanet Web Server (Sun Java System Web Server) prior to 7.0U9 that allows an attacker to stop a server instance via the management console when a user views a malicious page while authenticated. The issue is documented across multiple sources (JVN/...

HP Data Protector Express DtbClsLogin Stack Buffer Overflow (CVE-2010-3007)

HP OpenView Storage Data Protector is a cross-platform backup solution for Windows, Unix and Linux operating systems. The management console of the Data Protector environment provides quick access to track all Data Protector Express objects, including jobs, media, and scheduling rotation schemes....

SAP Management Console DoS

Multiple DoS conditions...

CVE-2010-2384

Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console...

CVE-2010-2376

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console...

CVE-2010-2376

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console...

CVE-2010-2376

CVE-2010-2376 affects Oracle Solaris 8, 9, and 10 via the Solaris Management Console. The vulnerability is local and impacts confidentiality and integrity, with details indicating an unspecified vector. Oracle’s July 2010 CPU advisory includes a patch for Solaris/Management Console in the Solaris...

CVE-2010-2384

CVE-2010-2384 affects Oracle Solaris 9/10. The Solaris wbem service, when enabled, runs SUNWrmui_reg.sh and can be abused by an unprivileged local user via unsafe handling of temporary files in /tmp, potentially impacting confidentiality and integrity. A full disclosure and patching guidance desc...

Oracle Solaris Management Console - WBEM Insecure Temporary File Creation

Oracle Solaris Management Console - WBEM Insecure Temporary File Creation source: https://www.securityfocus.com/bid/41642/info The 'Solaris Management Console' sub component of Oracle Solaris creates temporary files in an insecure manner. An attacker with local access can exploit this issue to...

Oracle Solaris Management Console - WBEM Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/41642/info The 'Solaris Management Console' sub component of Oracle Solaris creates temporary files in an insecure manner. An attacker with local access can exploit this issue to overwrite arbitrary files. This may result in denial-of-service conditions o...