CVE-2021-36921

Summary of CVE-2021-36921 (MONITORAPP AIWAF) : The issue affects MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0, specifically AIMANAGER before B115. Root cause is improper authentication in AIMANAGER, allowing an attacker to gain administrative access b...

MONITORAPP Application Insight Web Application Firewall 输入验证错误漏洞

MONITORAPP Application Insight Web Application Firewall AIWAF is an application firewall from MONITORAPP Corporation in South Korea. The MONITORAPP Application Insight Web Application Firewall suffers from an input validation error vulnerability that stems from a lack of input validation for one ...

MONITORAPP Application Insight Web Application Firewall 授权问题漏洞

The MONITORAPP Application Insight Web Application Firewall AIWAF is an application firewall from MONITORAPP Corporation in South Korea. A security vulnerability exists in Manager 2.1.0 before B115 on the MONITORAPP Application Insight Web Application Firewall AIWAF appliance, which stems from...

PT-2021-21419

Name of the Vulnerable Software and Affected Versions AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall AIWAF devices with Manager 2.1.0 Description The issue is related to OS Command Injection due to missing input validation on one of the parameters of an HTTP...

CVE-2021-36982: Improper Input Validation

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall AIWAF devices with Manager 2.1.0 allows OS Command Injection because of missing input validation on one of the parameters of an HTTP request...

CVE-2021-36921: Improper Authentication

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall AIWAF devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request...

PT-2021-21408

Name of the Vulnerable Software and Affected Versions AIMANAGER version 2.1.0 before B115 on MONITORAPP Application Insight Web Application Firewall AIWAF devices Description The issue allows an attacker to gain administrative access by modifying the response to an authentication check request, d...

CVE-2020-14210

Reflected Cross-Site Scripting XSS vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information. It provides a function to response to Request URL information when blocking...

CVE-2020-14210

Reflected Cross-Site Scripting XSS vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information. It provides a function to response to Request URL information when blocking...

Cross site scripting

Reflected Cross-Site Scripting XSS vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information. It provides a function to response to Request URL information when blocking...

CVE-2020-14210

Reflected Cross-Site Scripting XSS vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information. It provides a function to response to Request URL information when blocking...

CVE-2020-14210

Concrete details found: MONITORAPP WAF (AIWAF‑VE/AIWAF‑4000) has a reflected XSS vulnerability due to insufficient validation of client data by the web application. Impact is client‑side code execution. No patch/version remediation is specified in the provided documents; exploitation status is no...

PT-2020-13936

Name of the Vulnerable Software and Affected Versions MONITORAPP WAF affected versions not specified Description A Reflected Cross-Site Scripting XSS issue exists where script can be executed when responding to Request URL information. This occurs because the system provides a function to respond...

CVE-2020-14210: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information. It provides a function to response to Request URL information when blocking...