376 matches found
CVE-2010-2493
The default configuration of the deployment descriptor aka web.xml in picketlink-sts.war in 1 the securitysaml quickstart, 2 the webserviceproxysecurity quickstart, 3 the web-console application, 4 the http-invoker application, 5 the gpd-deployer application, 6 the jbpm-console application, 7 the...
CVE-2010-2474
JBoss Enterprise Service Bus ESB before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a service is secured, which might allow remote attackers to gain privileges by executing a service...
Default configuration
The default configuration of the deployment descriptor aka web.xml in picketlink-sts.war in 1 the securitysaml quickstart, 2 the webserviceproxysecurity quickstart, 3 the web-console application, 4 the http-invoker application, 5 the gpd-deployer application, 6 the jbpm-console application, 7 the...
Input validation
JBoss Enterprise Service Bus ESB before 4.7 CP02 in JBoss Enterprise SOA Platform before 5.0.2 does not properly consider the security domain with which a service is secured, which might allow remote attackers to gain privileges by executing a service...
CVE-2010-2493
The default configuration of the deployment descriptor aka web.xml in picketlink-sts.war in 1 the securitysaml quickstart, 2 the webserviceproxysecurity quickstart, 3 the web-console application, 4 the http-invoker application, 5 the gpd-deployer application, 6 the jbpm-console application, 7 the...
CVE-2010-1612
CVE-2010-1612 affects IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances prior to 3.8.0.0. The issue arises when using a QLOGIC Ethernet interface and involves processing malformed ...
Code injection
Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privileges via unknown vectors...
CVE-2010-0448
Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain "unauthorized access to data" via unknown vectors...
CVE-2010-0449
Cross-site scripting XSS vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
Code injection
Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain "unauthorized access to data" via unknown vectors...
CVE-2010-0450
Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privileges via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2010-0448
CVE-2010-0448 affects HP SOA Registry Foundation v6.63 and v6.64. Root cause details are not fully disclosed in the provided documents, but HP’s Security Bulletin (HPSBMA02490) notes remote unauthorized access to data, cross-site scripting, and privilege escalation. Affected versions include HP S...
CVE-2010-0449
CVE-2010-0449 is an XSS vulnerability in HP SOA Registry Foundation 6.63 and 6.64. The issue allows remote attackers to inject arbitrary script/HTML via unknown vectors, potentially affecting systems running HP SOA Registry Foundation on supported platforms. The related RedHat/HP security documen...
CVE-2010-0448
Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain "unauthorized access to data" via unknown vectors...
CVE-2010-0449
Cross-site scripting XSS vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2010-0450
Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privileges via unknown vectors...
CVE-2010-0450
CVE-2010-0450 affects HP SOA Registry Foundation 6.63 and 6.64. The vulnerability is described as an unspecified issue that allows remote authenticated users to gain privileges via unknown vectors. Red Hat/HP security bulletins list this as a privilege-escalation flaw with a base CVSS v2 score of...
[security bulletin] HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02037890 Version: 1 HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting XSS, Privilege Escalation NOTICE: The information in this...