CVE-2013-6299

Technical details for CVE-2013-6299 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2013-6318

CVE-2013-6318 is an XSS vulnerability affecting IBM Algo One components: MetaData Management Tools in UDS 4.7.0–5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0–4.9.0, and ACSWeb in AlgoWebApps 5.0.0. It enables remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2013-6301

CVE-2013-6301 is an XSS vulnerability in IBM Algo One used by MetaData Management Tools in UDS 4.7.0–5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0–4.9.0, and ACSWeb in AlgoWebApps 5.0.0. It allows remote authenticated users to inject arbitrary web script or HTML via unspecified v...

CVE-2013-5468

IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, does not encrypt login requests, which allows remote attackers to obtain sensitive information by sniffing the...

CVE-2013-6303

CVE-2013-6303 is a directory traversal vulnerability in IBM Algo One components: MetaData Management Tools (UDS 4.7.0–5.0.0), Algo Security Access Control Management (ACSWeb 4.7.0–4.9.0), and AlgoWebApps (ACSWeb 5.0.0). The underlying issue allows remote authenticated users to read arbitrary file...

CVE-2013-5420

The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request...

Design/Logic Flaw

The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request...

CVE-2013-5420

IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2’s IMS server prior to Ifix 6 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request. This vulnerability affects ISAM ESSO 8.2 prior to Ifix 6; the exact root cause is not ...

CVE-2013-5421

Cross-site scripting XSS vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote attackers to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form...

CVE-2013-6745

Cross-site scripting XSS vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form...

Cross site scripting

Cross-site scripting XSS vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote attackers to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form...

Cross site scripting

Cross-site scripting XSS vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form...

CVE-2013-5421

CVE-2013-5421 is an XSS vulnerability in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2, affecting the IMS server prior to Ifix 6. The issue arises from crafted input to an unspecified dynamic web form, allowing remote attackers to inject arbitrary web script or HTML. T...

CVE-2013-6745

Cross-site scripting XSS vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form...

CVE-2013-6745

CVE-2013-6745 describes an XSS vulnerability in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2, affecting the IMS Server before Ifix 6. An attacker with valid authentication could inject arbitrary script/HTML through a crafted input to an unspecified dynamic web form, p...

CVE-2013-5421

Cross-site scripting XSS vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On ISAM ESSO 8.2 allows remote attackers to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form...

IBM Tivoli Access Manager for e-Business / IBM Security Access Manager for Web Installed Components

IBM Security Access Manager for Web, formerly IBM Tivoli Access Manager for e-Business, is installed on the remote host. The application is an access and authentication control management system. TRUSTED...

CVE-2012-4421

The createpost function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote authenticated users to bypass intended access restrictions and publish new posts by leveraging the Contributor role and using the Atom Publishing...

Solaris 10 (x86) : 148871-01 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: mailx1. Supported versions that are affected are 8, 9, 10 and 11. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update,...

iGuard Security Access Control Cross Site Scripting Vulnerability

iGuard Security Access Control is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input in the embedded web server. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...