128 matches found
CVE-2021-40095
An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptible to a local file inclusion vulnerability when processing remote input in the log files downloaded by an authenticated administrator user, leading to the ability to read...
CVE-2021-40095
CVE-2021-40095 affects SquaredUp for SCOM 5.2.1.6654. The issue is a local file inclusion in the Download Log feature under System / Maintenance, triggered when processing remote input in the log files downloaded by an authenticated administrator user. This vulnerability enables reading arbitrary...
CVE-2021-40094
SquaredUp for SCOM 5.2.1.6654 is affected by a DOM-based cross-site scripting vulnerability. The issue is described across multiple sources as a DOM-based XSS that could allow an attacker to inject malicious code into a user’s device if successfully exploited. The vulnerability is associated with...
CVE-2021-40094
A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device...
CVE-2021-40093
CVE-2021-40093 concerns a cross-site scripting (XSS) vulnerability in the integration configuration of SquaredUp for SCOM 5.2.1.6654 . The exposed issue allows remote attackers to inject arbitrary web script or HTML via dashboard actions. The available documents identify the affected product and ...
CVE-2021-40093
A cross-site scripting XSS vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via dashboard actions...
CVE-2021-40092
The CVE-2021-40092 entry describes a cross-site scripting (XSS) vulnerability in the Image Tile feature of SquaredUp for SCOM 5.2.1.6654. The issue allows remote attackers to inject arbitrary web script or HTML via an SVG file. Connected sources corroborate the same description across multiple fe...
CVE-2021-40092
A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...
Squaredup 跨站脚本漏洞
A cross-site scripting vulnerability exists in the integration configuration of SquaredUp for SCOM version 5.2.1.6654, which could be exploited by remote attackers to inject arbitrary web script or HTML via an authorized URL in certain integration configurations. authorized URL in some integratio...
CVE-2021-40091
An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...
CVE-2021-40091
An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...
CVE-2021-40091
An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...
Server side request forgery (ssrf)
An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...
CVE-2021-40091
CVE-2021-40091 describes an SSRF vulnerability in SquaredUp for SCOM 5.2.1.6654 . The affected product is SquaredUp for SCOM; the root cause is an SSRF issue. Impact details from the entry include high severity with network attack vector and low attack complexity, with both confidentiality, integ...
CVE-2021-40091
An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...
CVE-2021-41352
SCOM Information Disclosure Vulnerability...
Information disclosure
SCOM Information Disclosure Vulnerability...
CVE-2021-41352
CVE-2021-41352 corresponds to a SCOM information disclosure vulnerability affecting System Center Operations Manager 2012 R2, 2016 and 2019. The connected Nessus/NASL entry describes an information disclosure vulnerability in SCOM’s web-facing components, specifically an insecure direct object re...
