4 matches found
mcholste Enterprise Log Search and Archive Cross-Site Scripting Vulnerability
mcholste Enterprise Log Search and Archive ELSA is an enterprise log search and archive system. A cross-site scripting vulnerability exists in the index view in mcholste ELSA version 1205, commit 2cc17f1 and earlier. A remote attacker can leverage the 'type', 'name', and 'value' parameters in...
CVE-2018-1000029
mcholste Enterprise Log Search and Archive ELSA version revision 1205, commit 2cc17f1 and earlier contains a Cross Site Scripting XSS vulnerability in index view / that can result in . This attack appear to be exploitable via Payload delivered via the type, name, and value parameters of...
PT-2018-9219
Name of the Vulnerable Software and Affected Versions: mcholste Enterprise Log Search and Archive ELSA version revision 1205, commit 2cc17f1 and earlier Description: The issue is related to a Cross Site Scripting XSS vulnerability in the index view / that can be exploited via payload delivered...
IBM Business Process Manager - User Account Reconfiguration
No description provided by source. Exploit Title: IBM BMPS BPM User account reconfiguration/Privilege Escalation/Information Disclosure Date: 31.01.14 Exploit Author: 0in Software link: http://www-03.ibm.com/software/products/en/business-process-manager-family/ Version: 8.0.1.1 newest versions ca...