CVE-2015-3628: Undefined Security Weakness

The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP AAM 11.4.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0, BIG-IP GTM 11.3.0 before 11.6.0 HF6,...

PT-2015-6248

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM versions 11.3.0 through 11.5.3 before HF2 and 11.6.0 before 11.6.0 HF6 F5 BIG-IP AAM versions 11.4.0 through 11.5.3 before HF2 and 11.6.0 before 11.6.0 HF6 F5 BIG-IP Edge Gatewa...

IBM WebSphere Java Object Deserialization RCE

The remote IBM WebSphere Application Server is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated, remote attacker can exploit this, by sending a crafted SOAP request, ...

The vulnerability of the SAP NetWeaver software integration platform allows a hacker to obtain information about the accessibility of internal network services.

The vulnerability of the SAP NetWeaver integration platform exists due to insufficient restrictions on access to the tcmonitoringwebserviceweb service. Exploiting this vulnerability allows a malicious actor to obtain information about the availability of internal network services through a...

The vulnerability of the SAP NetWeaver software integration platform allows a hacker to obtain information about the integration platform and the operating system.

The vulnerability of the SAP NetWeaver integration platform exists due to the lack of restrictions on remote invocation of the GetSystemInstanceList function. Exploiting this vulnerability allows a malicious actor to obtain information about the integration platform and the operating system throu...

PT-2015-7951

Уязвимость программной интеграционной платформы SAP NetWeaver существует из-за недостаточного ограничения доступа к сервлету tcmonitoringwebserviceweb. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить сведения о доступности внутренних сетевых служб при помощи...

PT-2015-7952

Уязвимость программной интеграционной платформы SAP NetWeaver существует из-за недостаточного ограничения доступа к методу GetSecNetworkId SAPControl. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить сведения о доступности внутренних сетевых служб при помощи...

Security feature bypass

The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive credentials via a crafted SOAP request to the 1 getBackupPolicy or 2 getBackupPolicies method...

CVE-2015-4069

The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive credentials via a crafted SOAP request to the 1 getBackupPolicy or 2 getBackupPolicies method...

CVE-2015-4069: Exposure of Sensitive Information to an Unauthorized Actor

The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive credentials via a crafted SOAP request to the 1 getBackupPolicy or 2 getBackupPolicies method...

Arcserve Unified Data Protection Management Service EdgeServiceImpl getBackupPolicies Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose information on vulnerable installations of Arcserve Unified Data Protection. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getBackupPolicies method of the EdgeServiceImpl web service. By...

PT-2015-6409

Name of the Vulnerable Software and Affected Versions Arcserve UDP versions prior to 5.0 Update 4 Description The issue allows remote attackers to obtain sensitive credentials via a crafted SOAP request to the getBackupPolicy or getBackupPolicies method. This is related to the EdgeServiceImpl web...

CVE-2015-2223

Multiple cross-site scripting XSS vulnerabilities in the web-based console management interface in Palo Alto Networks Traps formerly Cyvera Endpoint Protection 3.1.2.1546 allow remote attackers to inject arbitrary web script or HTML via the 1 Arguments, 2 FileName, or 3 URL parameter in a SOAP...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web-based console management interface in Palo Alto Networks Traps formerly Cyvera Endpoint Protection 3.1.2.1546 allow remote attackers to inject arbitrary web script or HTML via the 1 Arguments, 2 FileName, or 3 URL parameter in a SOAP...

CVE-2015-2223

Multiple cross-site scripting XSS vulnerabilities in the web-based console management interface in Palo Alto Networks Traps formerly Cyvera Endpoint Protection 3.1.2.1546 allow remote attackers to inject arbitrary web script or HTML via the 1 Arguments, 2 FileName, or 3 URL parameter in a SOAP...

PT-2015-5675

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Traps version 3.1.2.1546 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web-based console management interface. These vulnerabilities allow remote attackers to inject arbitrary web...

CVE-2015-2223: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web-based console management interface in Palo Alto Networks Traps formerly Cyvera Endpoint Protection 3.1.2.1546 allow remote attackers to inject arbitrary web script or HTML via the 1 Arguments, 2 FileName, or 3 URL parameter in a SOAP...

Palo Alto Traps Server 3.1.2.1546 - Persistent XSS Vulnerability

Exploit for windows platform in category web applications !/usr/bin/ruby =begin ------------------------------------------------------------------------ Product: Palo Alto Traps Server formerly Cyvera Endpoint Protection Vendor: Palo Alto Networks Vulnerable Versions: 3.1.2.1546 Tested Version:...

Palo Alto Traps Server 3.1.2.1546 - Persistent Cross-Site Scripting

Palo Alto Traps Server 3.1.2.1546 - Persistent Cross-Site Scripting !/usr/bin/ruby =begin ------------------------------------------------------------------------ Product: Palo Alto Traps Server formerly Cyvera Endpoint Protection Vendor: Palo Alto Networks Vulnerable Versions: 3.1.2.1546 Tested...

Palo Alto Traps Server 3.1.2.1546 - Persistent Cross-Site Scripting

!/usr/bin/ruby =begin ------------------------------------------------------------------------ Product: Palo Alto Traps Server formerly Cyvera Endpoint Protection Vendor: Palo Alto Networks Vulnerable Versions: 3.1.2.1546 Tested Version: 3.1.2.1546 Advisory Publication: 29 March 2015 Vendor...