pid.hardis.fr XSS vulnerability

Open Bug Bounty ID: OBB-637106 Description| Value ---|--- Affected Website:| pid.hardis.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Security Bulletin: Reflected XSS in IBM Worklight OAuth Server Web Api

Summary A Reflected Cross Site Scripting XSS vulnerability exists in the authorization function exposed by RESTful Web Api of IBM Worklight Framework. The vulnerable parameter is "scope", if you set as value a "realm"; not defined in authenticationConfig.xml you get an HTTP 403 Forbidden response...

Security Bulletin: Security vulnerability has been identified in WebSphere Application Server shipped with IBM Cloud Orchestrator (CVE-2015-7417)

Summary Cross site scripting vulnerability has been identified in WebSphere Application Server OAuth Service Provider that is shipped with IBM Cloud Orchestrator and Cloud Orchestrator Enterprise Edition. This issue was also addressed by IBM Business Process Manager and IBM Tivoli System Automati...

Security Bulletin: IBM WebSphere Application Server Liberty Profile vulnerability affects IBM Tivoli Application Dependency Discovery Manager (TADDM) (CVE-2015-1885)

Summary WebSphere Application Server Liberty Profile that is embedded in TADDM could allow a remote attacker to gain elevated privileges on the system when OAuth grant type of password is used. Vulnerability Details CVEID: CVE-2015-1885 DESCRIPTION: WebSphere Application Server Full Profile and...

Security Bulletin: Vulnerability in IBM WebSphere Application Server affects Tivoli Netcool Impact (CVE-2015-1885)

Summary IBM WebSphere Application Server is shipped as a component of Tivoli Netcool Impact. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin PI36211;8.5.0:...

Security Bulletin: Cross-site scripting in Oauth (CVE-2013-6738)

Summary Cross-site scripting in Oauth Vulnerability Details CVE ID: CVE-2013-6738 DESCRIPTION: OAuth /authorize endpoint will return an invalid query param in the response. This allows a script to be injected in the response. CVSS: CVSS Base Score: 4.3 CVSS Temporal Score: See for the current sco...

Security Bulletin: Content Collector for Email is affected by an Incorrect redirection for an OAuth authorization request in WebSphere Application Server both Traditional and Liberty

Summary Content Collector for Email has addressed the following vulnerability. IBM WebSphere Application Server is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Vulnerability...

Security Bulletin: Cross-site scripting vulnerability affects IBM Security Key Lifecycle Manager (CVE-2015-7417)

Summary There is a cross-site scripting vulnerability in IBM WebSphere Application Server for any consumers of the OAuth provider output affects IBM Security Key Lifecycle Manager. Vulnerability Details CVEID: CVE-2015-7417 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-site...

Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-1194)

Summary There is a potential cross-site request forgery in WebSphere Application Server OAuth service provider. Vulnerability Details Consult the security bulletin: Security Bulletin: Cross-site request forgery in WebSphere Application Server CVE-2017-1194 for vulnerability details and informatio...

Security Bulletin: Cross-site request forgery in Liberty for Java for IBM Bluemix (CVE-2017-1194)

Summary There is a potential cross-site request forgery in WebSphere Application Server OAuth service provider. Vulnerability Details CVEID: CVE-2017-1194 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-site request forgery which could allow an attacker to execute malicious a...

Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2015-7417)

Summary WebSphere Application Server is shipped as a component of IBM WebSphere Application Server Patterns. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin. There is a cross-site scripting vulnerability in IBM WebSphere...

Security Bulletin: Cross-site scripting vulnerability in IBM WebSphere Application Server for Bluemix (CVE-2015-7417)

Summary There is a cross-site scripting vulnerability in IBM WebSphere Application Server for Bluemix for any consumers of the OAuth provider output. Vulnerability Details CVEID: CVE-2015-7417 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-site scripting, caused by improper...

Security Bulletin: Cross-site scripting vulnerability in Liberty for Java for IBM Bluemix (CVE-2015-7417)

Summary There is a cross-site scripting vulnerability in WebSphere Application Server which affects Liberty for Java for IBM Bluemix for any consumers of the OAuth provider output. Vulnerability Details CVEID: CVE-2015-7417 DESCRIPTION: WebSphere Application Server is vulnerable to cross-site...

Security Bulletin: Cross-site scripting vulnerability in IBM WebSphere Application Server (CVE-2015-7417)

Summary There is a cross-site scripting vulnerability in IBM WebSphere Application Server for any consumers of the OAuth provider output. Vulnerability Details CVEID: CVE-2015-7417 DESCRIPTION: IBM WebSphere Application Server is vulnerable to cross-site scripting, caused by improper validation o...

Security Bulletin: Multiple Security Vulnerabilities fixed in IBM WebSphere Application Server 8.5.5.6

Summary Cross reference list for security vulnerabilites fixed in IBM WebSphere Application Server 8.5.5.6, IBM WebSphere Application Server Hypervisor 8.5.5.6 and IBM WebSphere Application Server Liberty Profile 8.5.5.6. Vulnerability Details CVEID: CVE-2015-0226 DESCRIPTION: Apache WSS4J could...

jira.ampath.or.ke XSS vulnerability

Open Bug Bounty ID: OBB-632363 Description| Value ---|--- Affected Website:| jira.ampath.or.ke Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jira.solanapro.com XSS vulnerability

Open Bug Bounty ID: OBB-631966 Description| Value ---|--- Affected Website:| jira.solanapro.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

team.dhs.jpidev.com XSS vulnerability

Open Bug Bounty ID: OBB-631957 Description| Value ---|--- Affected Website:| team.dhs.jpidev.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

epm.verisk.com XSS vulnerability

Open Bug Bounty ID: OBB-631032 Description| Value ---|--- Affected Website:| epm.verisk.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jira.unite.un.org XSS vulnerability

Open Bug Bounty ID: OBB-630879 Description| Value ---|--- Affected Website:| jira.unite.un.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...