CVE-2013-4779

Cross-site scripting XSS vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-5188

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description The issue allows remote attackers to execute arbitrary commands via unspecified...

PT-2013-5185

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description The issue allows remote attackers to obtain sensitive server and statistics...

PT-2013-5186

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description A cross-site scripting XSS issue exists in the core/handleTw.php file, allowing...

PT-2013-5187

Name of the Vulnerable Software and Affected Versions Siemens Enterprise OpenScape Branch appliance versions prior to 2 R0.32.0 Siemens OpenScape Session Border Controller SBC versions prior to 7 R1.7.0 Description The issue allows remote attackers to read arbitrary files via unspecified vectors,...

CVE-2013-4780: Exposure of Sensitive Information to an Unauthorized Actor

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2013-4781: Improper Neutralization of Special Elements used in an OS Command

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2013-4778: Exposure of Sensitive Information to an Unauthorized Actor

core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller SBC before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to obtain sensitive server and statistics information via unspecified vectors...