CVE-2021-38928 IBM Sterling B2B Integrator Standard Edition cross-origin resource sharing

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 210323...

Cross-Origin Resource Sharing (CORS)

quarkus-vertx-http is vulnerable to an insecure cross-origin resource sharing CORS policy. The vulnerability exists because the XMLHttpRequest has no event listeners registered on the object returned by the XMLHttpRequest upload property, allowing an attacker to send malicious GET and POST reques...

U.S. Dept Of Defense: CORS Misconfiguration in https://████████/accounts/login/

A CORS misconfiguration vulnerability was discovered in the login page of a website, allowing an attacker to exfiltrate sensitive data of a victim. The vulnerability was caused by a poorly configured CORS policy that trusted any arbitrary domain attacker-controlled domain name and sent the data t...

IBM Robotic Process Automation Access Control Error Vulnerability (CNVD-2022-68277)

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. An Access Control Error vulnerability exists in IBM Robotic Process Automation...

CVE-2022-41294

IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807...

CVE-2022-41294

CVE-2022-41294 affects IBM Robotic Process Automation (RPA) products, including IBM RPA for Cloud Pak, Service, and standard RPA, with versions before 21.0.5. The concrete vulnerability is improper access control that enables cross-origin resource sharing via the bot API. The IBM security bulleti...

Atlassian Bamboo < 7.2.10 / 8.0.x < 8.0.9 / 8.1.x < 8.1.4 / 8.2.x < 8.2.4 Multiple Vulnerabilities

The version of Atlassian Bamboo installed on the remote host is prior to 7.2.10, 8.0.x prior to 8.0.9, 8.1.x prior to 8.1.8 or 8.2.4. It is, therefore affected by multiple vulnerabilities: - A remote, unauthenticated attacker can bypass arbitrary Servlet Filters used by first and third party apps...

WordPress Twenty Seventeen 3.0 Cross-origin resource sharing information Vulnerability

Title: WordPress 6.0.2 - THEME - Twenty Seventeen: 3.0- CORS-Vulnerability Author: nu11secur1ty Vendor: https://wordpress.org/ Software: Twenty SeventeenVersion: 3.0 Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Twenty-Seventeen-3.0 Description: The...

Atlassian Jira < 8.13.22 Multiple Servlet Filter Vulnerabilities

According to its self-reported version number, the Atlassian Jira application running on the remote host is prior to 8.13.22, 8.14.x prior to 8.20.10 or 8.21.x prior to 8.22.4. It is, therefore, affected by the following vulnerabilities : - An arbitrary servlet filter bypass vulnerability which c...

Atlassian Confluence < 7.4.17 Multiple Servlet Filter Vulnerabilities

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.4.17, 7.5.x prior to 7.13.7, 7.14.x prior to 7.14.3, 7.15.x prior to 7.15.2, 7.16.x prior to 7.16.4, 7.17.x prior to 7.17.4 or 7.18.0. It is, therefore, affected by the...

Atlassian Confluence 7.5.x < 7.13.7 Multiple Servlet Filter Vulnerabilities

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.4.17, 7.5.x prior to 7.13.7, 7.14.x prior to 7.14.3, 7.15.x prior to 7.15.2, 7.16.x prior to 7.16.4, 7.17.x prior to 7.17.4 or 7.18.0. It is, therefore, affected by the...

Atlassian Jira 8.21.x < 8.22.4 Multiple Servlet Filter Vulnerabilities

According to its self-reported version number, the Atlassian Jira application running on the remote host is prior to 8.13.22, 8.14.x prior to 8.20.10 or 8.21.x prior to 8.22.4. It is, therefore, affected by the following vulnerabilities : - An arbitrary servlet filter bypass vulnerability which c...

Atlassian Confluence 7.17.x < 7.17.4 Multiple Servlet Filter Vulnerabilities

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.4.17, 7.5.x prior to 7.13.7, 7.14.x prior to 7.14.3, 7.15.x prior to 7.15.2, 7.16.x prior to 7.16.4, 7.17.x prior to 7.17.4 or 7.18.0. It is, therefore, affected by the...

Atlassian Confluence 7.18.x < 7.18.1 Multiple Servlet Filter Vulnerabilities

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.4.17, 7.5.x prior to 7.13.7, 7.14.x prior to 7.14.3, 7.15.x prior to 7.15.2, 7.16.x prior to 7.16.4, 7.17.x prior to 7.17.4 or 7.18.0. It is, therefore, affected by the...

Atlassian Confluence 7.15.x < 7.15.2 Multiple Servlet Filter Vulnerabilities

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.4.17, 7.5.x prior to 7.13.7, 7.14.x prior to 7.14.3, 7.15.x prior to 7.15.2, 7.16.x prior to 7.16.4, 7.17.x prior to 7.17.4 or 7.18.0. It is, therefore, affected by the...

Fisheye: Multiple Servlet Filter Vulnerabilities

Multiple Servlet Filter vulnerabilities have been fixed in Fisheye. These vulnerabilities also affect other Atlassian products. For more information, refer to Atlassian's security...

Siemens SICAM GridEdge Source Authentication Error Vulnerability

SICAM GridEdge enables IoT functionality in your existing IEC61850 devices with just a few clicks.A source authentication error vulnerability in Siemens SICAM GridEdge is caused by the fact that the affected software does not apply cross-domain resource sharing CORS restrictions to critical...

CVE-2022-30228

A vulnerability has been identified in SICAM GridEdge Classic All versions V2.6.6. The affected software does not apply cross-origin resource sharing CORS restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could...

CVE-2022-30228

A vulnerability has been identified in SICAM GridEdge Classic All versions V2.6.6. The affected software does not apply cross-origin resource sharing CORS restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could...

CVE-2022-30228

A vulnerability has been identified in SICAM GridEdge Classic All versions V2.6.6. The affected software does not apply cross-origin resource sharing CORS restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could...