Design/Logic Flaw

The Monitoring Console app configured in Distributed mode allows for a Reflected XSS in a query parameter in Splunk Enterprise versions before 8.1.4. The Monitoring Console app is a bundled app included in Splunk Enterprise, not for download on SplunkBase, and not installed on Splunk Cloud Platfo...

CVE-2022-27183 Reflected XSS in a query parameter of the Monitoring Console

The Monitoring Console app configured in Distributed mode allows for a Reflected XSS in a query parameter in Splunk Enterprise versions before 8.1.4. The Monitoring Console app is a bundled app included in Splunk Enterprise, not for download on SplunkBase, and not installed on Splunk Cloud Platfo...

Splunk Enterprise 跨站脚本漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

Cross-Site Scripting (XSS)

geronimo is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the name, ip, username or description parameters in console/portal/Server/Monitoring, and PATHINFO parameter to the default URI under console/portal/...

Security Bulletin: : The WebSphere eXtreme Scale 7.1.0 and 7.1.1 monitoring console lacks protection for various vulnerabilities. (CVE-2015-2025 CVE-2015-2026 CVE-2015-2027 CVE-2015-2028 CVE-2015-2029 CVE-2015-2030 CVE-2015-2031)

Summary These vulnerabilities in the WebSphere eXtreme Scale monitoring console may allow an attacker to gain access to the monitoring console, getting read/only access to statistics data on grid usage. Vulnerability Details CVEID: CVE-2015-2025 DESCRIPTION: IBM WebSphere Extreme Scale could allo...

CVE-2013-5394

The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via unspecified vectors...

CVE-2013-5390

Cross-site scripting XSS vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors...

CVE-2013-5394

IBM WebSphere eXtreme Scale Monitoring Console (versions 7.1.0, 7.1.1, 8.5.0, 8.6.0) is affected by CVE-2013-5394, a phishing vulnerability reported in the IBM Security Bulletin. The issue arises in the monitoring console and is exploitable by remote authenticated users via unspecified vectors. R...

CVE-2013-5394

The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via unspecified vectors...

CVE-2013-5393

WebSphere eXtreme Scale monitoring console is affected by CVE-2013-5393 due to a logoff handling weakness in versions 7.1.0, 7.1.1, 8.5.0 and 8.6.0. The IBM security bulletin lists the vulnerability and provides remediation: upgrade to WebSphere eXtreme Scale 7.1.1 and apply the interim fix PM974...

DB2 Monitoring Console Multiple Unspecified Security Bypass Vulnerabilities

The host is running IBM DMC and is prone to multiple Unspecified Security Bypass Vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2mcmultunspecifiedvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ DB2 Monitoring Console Multiple Unspecified Security Bypass Vulnerabilities Authors: Antu Sanadi...

DB2 Monitoring Console Version Detection

This script finds the installed DB2 Monitoring Console version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-7131

Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to gain access to a database via a link to a victim who is already connected to the database...

CVE-2008-7130

Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to upload arbitrary files via unknown vectors...

CVE-2008-7130

The connected sources indicate that CVE-2008-7130 relates to IBM DB2 Monitoring Console with multiple unspecified security bypass vulnerabilities in versions earlier than 2.2.25. OpenVAS entries title this as “DB2 Monitoring Console < 2.2.25 Multiple Unspecified Security Bypass Vulnerabilities...

CVE-2008-7131

Unspecified vulnerability in DB2 Monitoring Console 2.2.4 and earlier allows remote attackers to gain access to a database via a link to a victim who is already connected to the database...

CVE-2008-7131

CVE-2008-7131 affects the IBM DB2 Monitoring Console 2.2.4 and earlier. The description states an unspecified vulnerability that allows remote attackers to gain access to a database via a link to a victim who is already connected to the database. The connected/openvas references do not provide ex...

DB2 Monitoring Console文件上传和非授权访问漏洞

BUGTRAQ ID: 28253 DB2 Monitoring Console是轻型的基于web的DB2控制台。 DB2 Monitoring Console中的安全漏洞允许向运行该应用的Web服务器上传文件；如果用户受骗跟随了恶意链接的话，还可能导致访问当前用户所连接的数据库。成功攻击要求知道DB2 MC Web服务器的地址。 DB2 Monitoring Console DB2 Monitoring Console 2.2.18 DB2 Monitoring Console ---------------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下...