CVE-2017-3067

Adobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure vulnerability resulting from abuse of the pre-population service in AEM Forms...

CVE-2017-3067: Exposure of Sensitive Information to an Unauthorized Actor

Adobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure vulnerability resulting from abuse of the pre-population service in AEM Forms...

PT-2017-15635

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms versions 6.0 through 6.2 Description The issue is related to an information disclosure vulnerability resulting from the abuse of the pre-population service in AEM Forms. Recommendations For Adobe Experience Manag...

Session fixation

eClinicalWorks Population Health CCMR suffers from a session fixation vulnerability. When authenticating a user, the application does not assign a new session ID, making it possible to use an existent session ID...

Cross site request forgery (csrf)

eClinicalWorks Population Health CCMR suffers from a cross-site request forgery CSRF vulnerability in portalUserService.jsp which allows remote attackers to hijack the authentication of content administrators for requests that could lead to the creation, modification and deletion of users,...

CVE-2015-4591

eClinicalWorks Population Health CCMR suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated users to inject arbitrary javascript via the strMessage parameter...

CVE-2015-4593

eClinicalWorks Population Health CCMR suffers from a cross-site request forgery CSRF vulnerability in portalUserService.jsp which allows remote attackers to hijack the authentication of content administrators for requests that could lead to the creation, modification and deletion of users,...

CVE-2015-4594

eClinicalWorks Population Health CCMR suffers from a session fixation vulnerability. When authenticating a user, the application does not assign a new session ID, making it possible to use an existent session ID...

CVE-2015-4591

eClinicalWorks Population Health CCMR suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated users to inject arbitrary javascript via the strMessage parameter...

CVE-2015-4593

eClinicalWorks Population Health CCMR suffers from a cross-site request forgery CSRF vulnerability in portalUserService.jsp which allows remote attackers to hijack the authentication of content administrators for requests that could lead to the creation, modification and deletion of users,...

CVE-2015-4593

CVE-2015-4593 refers to a cross-site request forgery vulnerability in the EClinicalWorks Population Health (CCMR) Client Portal, specifically in portalUserService.jsp. The issue could allow remote attackers to hijack content administrator authentication and perform actions such as creating, modif...

CVE-2015-4591

CVE-2015-4591 relates to the eClinicalWorks Population Health (CCMR) Client Portal. The vulnerability is a cross-site scripting (XSS) weakness in login.jsp that allows injection of arbitrary JavaScript via the strMessage parameter. The underlying issue is insufficient input sanitization of this p...

CVE-2015-4592

The CVE-2015-4592 entry concerns eClinicalWorks Population Health (CCMR) Client Portal Software. A SQL injection vulnerability exists in portalUserService.jsp that allows remote authenticated users to inject arbitrary malicious database commands as part of user input. The issue is documented acro...

CVE-2015-4594

CVE-2015-4594 affects eClinicalWorks Population Health CCMR Client Portal. The root cause is a missing new session ID upon user authentication, enabling session fixation by reusing an existing session ID. The vulnerability implies potential compromise of active sessions (high/critical impact per ...

CVE-2015-4593: Cross-Site Request Forgery (CSRF)

eClinicalWorks Population Health CCMR suffers from a cross-site request forgery CSRF vulnerability in portalUserService.jsp which allows remote attackers to hijack the authentication of content administrators for requests that could lead to the creation, modification and deletion of users,...

CVE-2015-4592: Improper Neutralization of Special Elements used in an SQL Command

eClinicalWorks Population Health CCMR suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as part of user input...

CVE-2015-4594: Improper Access Control

eClinicalWorks Population Health CCMR suffers from a session fixation vulnerability. When authenticating a user, the application does not assign a new session ID, making it possible to use an existent session ID...

PT-2017-6768

Name of the Vulnerable Software and Affected Versions eClinicalWorks Population Health CCMR affected versions not specified Description The issue concerns a session fixation problem. When a user is authenticated, the application fails to assign a new session ID. This allows for the use of an...

PT-2017-6765

Name of the Vulnerable Software and Affected Versions eClinicalWorks Population Health CCMR affected versions not specified Description The issue concerns a cross-site scripting vulnerability. It affects the login.jsp file, allowing remote unauthenticated users to inject arbitrary JavaScript via...

PT-2017-6766

Name of the Vulnerable Software and Affected Versions eClinicalWorks Population Health CCMR affected versions not specified Description The issue is related to an SQL injection vulnerability in the portalUserService.jsp file. This vulnerability allows remote authenticated users to inject arbitrar...