Tollgrade SmartGrid LightHouse Sensor Management System Software Cross-Site Request Forgery Vulnerability

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software is a Web-based smart grid lighthouse sensor management system from Tollgrade, Inc. A cross-site request forgery vulnerability exists in Tollgrade SmartGrid LightHouse SMS Software versions prior to 5.1 and 4.1.0 Build 16. A remo...

CVE-2016-0866

Cross-site scripting XSS vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0864

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified vectors...

CVE-2016-0863

Cross-site request forgery CSRF vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-0864: Exposure of Sensitive Information to an Unauthorized Actor

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified vectors...

PT-2016-4429

Name of the Vulnerable Software and Affected Versions Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS versions prior to 5.1 Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS version 4.1.0 Build 16 Description The issue is related to a cross-site...

PT-2016-4427

Name of the Vulnerable Software and Affected Versions Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS versions prior to 5.1 Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS version 4.1.0 Build 16 Description The issue allows remote attackers to...

CVE-2016-0863: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-0865: Undefined Security Weakness

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified vectors...

PT-2016-4428

Name of the Vulnerable Software and Affected Versions Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS versions prior to 5.1 Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS version 4.1.0 Build 16 Description The issue allows remote authenticated...

PT-2016-4426

Name of the Vulnerable Software and Affected Versions Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS versions prior to 5.1 Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS version 4.1.0 Build 16 Description A cross-site request forgery CSRF issue...

CVE-2016-0866: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...