5208 matches found
Atlassian Crowd < 2.11.2 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF
The version of Atlassian Crowd installed on the remote host is prior to 2.11.2. It is, therefore, affected by a internal network resource disclosure CSRF vulnerability in the OAuth plugin IconUriServlet. Note that Nessus has not tested for this issue but has instead relied only on the application...
Atlassian Bitbucket < 4.14.4 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF
The version of Atlassian Bitbucket installed on the remote host is prior to 4.14.4. It is, therefore, affected by a internal network resource disclosure CSRF vulnerability in the OAuth plugin IconUriServlet. Note that Nessus has not tested for this issue but has instead relied only on the...
Atlassian Crucible < 4.3.2 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF
According to its self-reported version, the installation of Atlassian Crucible running on the remote host is prior to 4.3.2. It is, therefore, affected by a internal network resource disclosure CSRF vulnerability in the OAuth plugin IconUriServlet. Note that Nessus has not tested for this issue b...
Atlassian Confluence < 6.1.3 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF
According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.1.3. It is, therefore, affected by a internal network resource disclosure CSRF vulnerability in the OAuth plugin IconUriServlet. Note that Nessus has not tested for this...
Atlassian FishEye < 4.3.2 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF
According to its self-reported version, the installation of Atlassian FishEye running on the remote host is prior to 4.3.2. It is, therefore, affected by a internal network resource disclosure CSRF vulnerability in the OAuth plugin IconUriServlet. Note that Nessus has not tested for this issue bu...
Microsoft Windows 10: Consumer Microsoft account user authentication
When enabled, this policy will prevent all applications and services on the device from new consumer Microsoft account authentication via the Windows OnlineID and WebAccountManager APIs. This policy may not affect applications which have already authenticated until the authentication cache expire...
pid.hardis.fr XSS vulnerability
Open Bug Bounty ID: OBB-637106 Description| Value ---|--- Affected Website:| pid.hardis.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Security Bulletin: Reflected XSS in IBM Worklight OAuth Server Web Api
Summary A Reflected Cross Site Scripting XSS vulnerability exists in the authorization function exposed by RESTful Web Api of IBM Worklight Framework. The vulnerable parameter is "scope", if you set as value a "realm"; not defined in authenticationConfig.xml you get an HTTP 403 Forbidden response...
Security Bulletin: Security vulnerability has been identified in WebSphere Application Server shipped with IBM Cloud Orchestrator (CVE-2015-7417)
Summary Cross site scripting vulnerability has been identified in WebSphere Application Server OAuth Service Provider that is shipped with IBM Cloud Orchestrator and Cloud Orchestrator Enterprise Edition. This issue was also addressed by IBM Business Process Manager and IBM Tivoli System Automati...
Security Bulletin: IBM WebSphere Application Server Liberty Profile vulnerability affects IBM Tivoli Application Dependency Discovery Manager (TADDM) (CVE-2015-1885)
Summary WebSphere Application Server Liberty Profile that is embedded in TADDM could allow a remote attacker to gain elevated privileges on the system when OAuth grant type of password is used. Vulnerability Details CVEID: CVE-2015-1885 DESCRIPTION: WebSphere Application Server Full Profile and...
Security Bulletin: Vulnerability in IBM WebSphere Application Server affects Tivoli Netcool Impact (CVE-2015-1885)
Summary IBM WebSphere Application Server is shipped as a component of Tivoli Netcool Impact. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin PI36211;8.5.0:...
Security Bulletin: Cross-site scripting in Oauth (CVE-2013-6738)
Summary Cross-site scripting in Oauth Vulnerability Details CVE ID: CVE-2013-6738 DESCRIPTION: OAuth /authorize endpoint will return an invalid query param in the response. This allows a script to be injected in the response. CVSS: CVSS Base Score: 4.3 CVSS Temporal Score: See for the current sco...
Security Bulletin: Content Collector for Email is affected by an Incorrect redirection for an OAuth authorization request in WebSphere Application Server both Traditional and Liberty
Summary Content Collector for Email has addressed the following vulnerability. IBM WebSphere Application Server is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Vulnerability...
Security Bulletin: Cross-site scripting vulnerability affects IBM Security Key Lifecycle Manager (CVE-2015-7417)
Summary There is a cross-site scripting vulnerability in IBM WebSphere Application Server for any consumers of the OAuth provider output affects IBM Security Key Lifecycle Manager. Vulnerability Details CVEID: CVE-2015-7417 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-site...
Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-1194)
Summary There is a potential cross-site request forgery in WebSphere Application Server OAuth service provider. Vulnerability Details Consult the security bulletin: Security Bulletin: Cross-site request forgery in WebSphere Application Server CVE-2017-1194 for vulnerability details and informatio...
Security Bulletin: Cross-site request forgery in Liberty for Java for IBM Bluemix (CVE-2017-1194)
Summary There is a potential cross-site request forgery in WebSphere Application Server OAuth service provider. Vulnerability Details CVEID: CVE-2017-1194 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-site request forgery which could allow an attacker to execute malicious a...
Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2015-7417)
Summary WebSphere Application Server is shipped as a component of IBM WebSphere Application Server Patterns. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin. There is a cross-site scripting vulnerability in IBM WebSphere...
Security Bulletin: Cross-site scripting vulnerability in IBM WebSphere Application Server for Bluemix (CVE-2015-7417)
Summary There is a cross-site scripting vulnerability in IBM WebSphere Application Server for Bluemix for any consumers of the OAuth provider output. Vulnerability Details CVEID: CVE-2015-7417 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-site scripting, caused by improper...
Security Bulletin: Cross-site scripting vulnerability in Liberty for Java for IBM Bluemix (CVE-2015-7417)
Summary There is a cross-site scripting vulnerability in WebSphere Application Server which affects Liberty for Java for IBM Bluemix for any consumers of the OAuth provider output. Vulnerability Details CVEID: CVE-2015-7417 DESCRIPTION: WebSphere Application Server is vulnerable to cross-site...
Security Bulletin: Cross-site scripting vulnerability in IBM WebSphere Application Server (CVE-2015-7417)
Summary There is a cross-site scripting vulnerability in IBM WebSphere Application Server for any consumers of the OAuth provider output. Vulnerability Details CVEID: CVE-2015-7417 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-site scripting, caused by improper validation o...