PT-2026-82342

Уязвимость системы для автоматизации ИТ- и бизнес-процессов Naumen Service Management Platform связана с отсутствием авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

PT-2026-48796

Уязвимость веб-интерфейса платформы автоматизации Naumen Service Management Platform связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, проводить межсайтовые сценарные атаки XSS...

PT-2024-41364

Уязвимость платформы автоматизации Naumen Service Management Platform связана с использованием опасных методов или функций. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

PT-2024-9398

Name of the Vulnerable Software and Affected Versions: Naumen Service Management Platform affected versions not specified Description: The issue is related to insufficient protection of service data on the Naumen Service Management Platform. It allows a remote attacker to obtain user credentials...

PT-2024-9393

Name of the Vulnerable Software and Affected Versions: Naumen Service Management Platform affected versions not specified Description: The issue is related to insufficient input filtering and lack of protection for the web page structure in the Naumen Service Management Platform. This can be...

CVE-2024-30801: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code via a crafted payload to Login.asp component...

Logic Flaw Vulnerability in Zhengfang Service Management Platform of Zhengfang Software Co.

hereinafter referred to as "Zhengfang", founded in January 1999, is a software enterprise and a high-tech enterprise specializing in consulting, planning, construction and service in the field of education informatization in colleges and universities. A logic flaw exists in the Zhengfang Service...

CVE-2023-43790 iTop vulnerable to XSS in friendlyname in object details

iTop is an IT service management platform. By manipulating HTTP queries, a user can inject malicious content in the fields used for the object friendlyname value. This vulnerability is fixed in 3.1.1 and 3.2.0...

CVE-2023-34446 iTop XSS vulnerability on pages/preferences.php

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, when displaying pages/preferences.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0...

CVE-2022-39214 Authenticated users of Combodo iTop can take over any account

Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account's username. This issue is fixed in versions 2.7.8 and 3.0.2-1...

IBM Jazz for Service Management跨站脚本漏洞

Jazz is IBM Rational's next-generation collaboration platform for software delivery technology.The Jazz platform has been carefully designed and developed specifically for global and geographically diverse teams, and will change the way people collaborate to build software - improving the...

Unauthorized Access Vulnerability in Service Management Platform of Ortho Software Co.

Ltd. is a software enterprise and high-tech enterprise specializing in consulting, planning, construction and service in the field of university education informatization. An unauthorized access vulnerability exists in the service management platform of Zhengfang Software Co., Ltd. that can be...