5294 matches found
NCR Atleos Terminal Handler 安全漏洞
NCR Atleos Terminal Handler is an ATM enterprise software solution from NCR Atleos that reduces costs, improves business agility and increases your competitive advantage. A security vulnerability exists in NCR Atleos Terminal Handler version 1.5.1, which stems from a mishandling of GET requests b...
CVE-2023-47294
An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie...
PT-2025-26603 · Ncr · Ncr Terminal Handler
Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: An issue allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application, including their usernames, roles,...
PT-2025-26615 · Ncr · Ncr Terminal Handler
Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: The issue allows a remote attacker to escalate privileges via a crafted POST request to the "grantRolesToUsers", "grantRolesToGroups", and "grantRolesToOrganization" SOAP API component...
CVE-2023-48978
An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camera URL component...
PT-2025-26611 · Ncr · Ncr Terminal Handler
Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: A CSV injection issue allows attackers to execute arbitrary commands by injecting a crafted payload into any text field that accepts strings. Recommendations: For NCR Terminal Handler version...
CVE-2023-47298
CVE-2023-47298 affects NCR Terminal Handler 1.5.1. The issue is broken access control on the SOAP API endpoint, allowing a low-privilege authenticated user to query and obtain information about all application users, including usernames, roles, security groups, and account statuses. Public refere...
NCR Atleos ITM Web terminal 安全漏洞
NCR Atleos ITM Web terminal is a web terminal from NCR Atleos, Inc. A security vulnerability exists in NCR Atleos ITM Web terminal versions 4.4.0 and 4.4.4, which stems from improper handling of specially crafted scripts by the IP camera URL component, which could lead to the execution of arbitra...
PT-2025-26610 · Ncr · Ncr Terminal Handler
Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: The issue allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie. Recommendations: For NCR Terminal Handler...
CVE-2023-47032
CVE-2023-47032 affects NCR Terminal Handler v1.5.1. The issue arises from mishandling crafted scripts sent to the UserService SOAP API function, enabling remote code execution. In the CVE records, the impact is rated high/critical (CVSS 3.1: 9.8) with network access, no privileges required, no us...
PT-2025-26604 · Ncr · Ncr Itm Web Terminal
Name of the Vulnerable Software and Affected Versions: NCR ITM Web terminal versions 4.4.0 through 4.4.4 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the IP camera URL component. Recommendations: For versions 4.4.0 through 4.4.4, consider...
CVE-2023-47029
An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted POST request to the UserService component...
CVE-2023-47295
A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands via injecting a crafted payload into any text field that accepts strings...
CVE-2023-47029
An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted POST request to the UserService component...
CVE-2023-47294
An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie...
PT-2025-26616 · Ncr · Ncr Terminal Handler
Name of the Vulnerable Software and Affected Versions: NCR Terminal Handler version 1.5.1 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the "UserService SOAP API" function. Recommendations: For NCR Terminal Handler version 1.5.1, consider...
NCR Atleos Terminal Handler 安全漏洞
NCR Atleos Terminal Handler is an ATM enterprise software solution from NCR Atleos that reduces costs, improves business agility and increases your competitive advantage. A security vulnerability exists in NCR Atleos Terminal Handler version 1.5.1, which stems from an improperly configured system...
CVE-2023-48978
An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camera URL component...
CVE-2023-47030
CVE-2023-47030 affects NCR Terminal Handler v1.5.1. A GET request to the UserService SOAP API endpoint to validate if a user exists can lead to remote code execution and exposure of sensitive information. The public sources consistently describe this as a critical remote vulnerability (CVSSv3.1 b...