Cisco Unified Communications Manager Unified Serviceability CSRF Vulnerability

A vulnerability in the Cisco Unified Serviceability component of Cisco Unified Communications Manager CUCM could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this...

PT-2013-4354

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager CUCM affected versions not specified Description A cross-site request forgery CSRF issue in the Unified Serviceability component allows remote attackers to hijack the authentication of arbitrary users for...

CVE-2013-3397: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Unified Serviceability component in Cisco Unified Communications Manager CUCM allows remote attackers to hijack the authentication of arbitrary users for requests that perform Unified Serviceability actions, aka Bug ID CSCuh10298...

OpenJDK: tracing insufficient access checks (Serviceability, 8010209)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from th...

OpenJDK: JConsole SSL support (Serviceability, 8003703)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the...

Oracle Java SE Multiple Vulnerabilities (June 2013 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than or equal to 7 Update 21, 6 Update 45 or 5 Update 45. It is, therefore, potentially affected by security issues in the following components : - 2D - AWT - CORBA - Deployment - Hotspot -...

OpenJDK: tracing insufficient access checks (Serviceability, 8010209)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from th...

Oracle Java SE Multiple Vulnerabilities (June 2013 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than or equal to 7 Update 21, 6 Update 45 or 5 Update 45. It is, therefore, potentially affected by security issues in the following components : - 2D - AWT - CORBA - Deployment - Hotspot -...

CVE-2013-2460

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from th...

Design/Logic Flaw

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the...

Improper access control

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from th...

CVE-2013-2460

An unspecified vulnerability exists in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, as well as OpenJDK 7 . This flaw allows remote attackers to impact confidentiality, integrity, and availability via unknown vectors related to Serviceability . Additional...

CVE-2013-2412

CVE-2013-2412 is an unspecified vulnerability in the Java Runtime Environment (JRE) Serviceability area that Oracle/OpenJDK-related CPUs list as allowing remote/confidentiality impact via unknown vectors. In connected documents, MiracleLinux AXSA-2013-553:03 documents CVE-2013-2412 as one of mult...

CVE-2013-2460

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from th...

CVE-2013-2412

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the...

CVE-2013-2412: Undefined Security Weakness

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Serviceability. NOTE: the previous information is from the...

CVE-2013-2460: Undefined Security Weakness

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from th...