The vulnerability of the High Availability service of the Cisco Smart Software Manager On-Prem administration tool allows a hacker to gain access to read and write system files.

The vulnerability of the Cisco Smart Software Manager On-Premise administration software’s high availability feature is related to the presence of a statistical password for the standard account. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read and...

The vulnerability of the API interface of the Cisco Smart Software Manager On-Prem administration license management software allows a perpetrator to trigger a service failure.

The vulnerability of the API interface of the Cisco Smart Software Manager On-Prem administration license software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Microsoft Dynamics 365 Field Service Cross-Site Scripting Vulnerability

Microsoft Dynamics 365 Field Service is a field service management system, a business application that helps organizations deliver field service to customer locations. This application combines workflow automation, scheduling algorithms, and mobility to arm employees to make it successful when...

CVE-2020-0656

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

PT-2020-1325

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 on-premises affected versions not specified Description A cross-site scripting issue exists due to improper sanitization of specially crafted web requests to the affected Dynamics server. This could allow a remote attack...

CVE-2020-0656: Improper Neutralization of Input During Web Page Generation

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 On-Premise Cross Site Scripting Vulnerability'...

Cloud Template Tool – The only way for Imperva On-Premises deployment on AWS

For the last six years, Imperva’s customers have been able to deploy our On-Premises product on AWS and enjoy the many advantages of cloud deployment including flexibility, cost-effectiveness, scalability, accessibility and many others. But using Imperva On-Premises on AWS wasn’t always easy, and...

Centraleyezer Cross-Site Scripting Vulnerability (CNVD-2019-42571)

Centraleyezer is a vulnerability tracking and management platform. The platform is used for vulnerability reporting, prioritization, escalation and tracking of vulnerabilities. A cross-site scripting vulnerability exists in Centraleyezer On Premises, which can be exploited by an attacker to uploa...

Centraleyezer Cross-Site Scripting Vulnerability

Centraleyezer is a vulnerability tracking and management platform. The platform is used for vulnerability reporting, prioritization, escalation and tracking of vulnerabilities. A cross-site scripting vulnerability exists in Centraleyezer On Premises that can be exploited by an attacker to execute...

CVE-2019-12299

Sandline Centraleyezer On Premises allows Stored XSS using HTML entities in the name field of the Category section...

Unrestricted file upload

Sandline Centraleyezer On Premises allows Unrestricted File Upload leading to Stored XSS. An HTML page running a script could be uploaded to the server. When a victim tries to download a CISO Report template, the script is loaded...

CVE-2019-12299

The connected records confirm a Stored XSS vulnerability in Sandline Centraleyezer (On Premises) affecting the Category section’s name field. Root cause: lack of proper validation of client-side data (HTML entities). Impact: client-side code execution. No version-specific affected components or p...

Centraleyezer Cross-Site Scripting Vulnerability (CNVD-2020-03037)

Centraleyezer is a vulnerability tracking and management platform. The platform is used for vulnerability reporting, prioritization, escalation and tracking of vulnerabilities. A cross-site scripting vulnerability exists in Centraleyezer On Premises. The vulnerability stems from a lack of proper...

CVE-2019-12271: Unrestricted Upload of File with Dangerous Type

Sandline Centraleyezer On Premises allows unrestricted File Upload with a dangerous type, because the feature of adding ".jpg" to any uploaded filename is not enforced on the server side...

Centraleyezer File Upload Vulnerability (CNVD-2020-03038)

Centraleyezer is a vulnerability tracking and management platform. The platform is used for vulnerability reporting, prioritization, escalation and tracking of vulnerabilities. A file upload vulnerability exists in Centraleyezer On Premises. An attacker can exploit this vulnerability to upload HT...

CVE-2019-12299: Improper Neutralization of Input During Web Page Generation

Sandline Centraleyezer On Premises allows Stored XSS using HTML entities in the name field of the Category section...

PT-2019-12740

Name of the Vulnerable Software and Affected Versions Sandline Centraleyezer On Premises affected versions not specified Description The issue allows for Stored XSS using HTML entities in the name field of the Category section. Recommendations At the moment, there is no information about a newer...

PT-2019-12746

Name of the Vulnerable Software and Affected Versions Sandline Centraleyezer On Premises affected versions not specified Description The issue allows for Unrestricted File Upload, leading to Stored XSS. This means an HTML page running a script could be uploaded to the server. When a victim attemp...

CVE-2019-12311: Improper Neutralization of Input During Web Page Generation

Sandline Centraleyezer On Premises allows Unrestricted File Upload leading to Stored XSS. An HTML page running a script could be uploaded to the server. When a victim tries to download a CISO Report template, the script is loaded...

PT-2019-12724

Name of the Vulnerable Software and Affected Versions Sandline Centraleyezer On Premises affected versions not specified Description The issue allows for unrestricted file upload with dangerous types. This is because the feature of adding ".jpg" to any uploaded filename is not enforced on the...