366 matches found
CVE-2022-46404
A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager 8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4 that may allow an unauthenticated attacker to upload arbitrary files and achieve administrative access to th...
Malicious code in uber-unify (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21e225a3970b7b05148665407d43149de0796a652a40af4f9cb8dfeb3898b82f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6727 Malicious code in uber-unify (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21e225a3970b7b05148665407d43149de0796a652a40af4f9cb8dfeb3898b82f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-36444
An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 10R9.12.1. A remote code execution vulnerability may allow an unauthenticated attacker with network access to the admi...
Remote code execution
An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 10R9.12.1. A remote code execution vulnerability may allow an unauthenticated attacker with network access to the admi...
CVE-2022-36444
An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.1, and Atos Unify OpenScape BCF 10 before 10R9.12.1. A remote code execution vulnerability may allow an unauthenticated attacker with network access to the admi...
CVE-2022-36444
Affected products: Atos Unify OpenScape SBC (versions 9–10 before 10R2.2.1), OpenScape Branch (versions 9–10 before 10R2.1.1), and OpenScape BCF 10 before 10R9.12.1. Root cause/impact: a remote code execution vulnerability allows an unauthenticated attacker with network access to the admin interf...
PT-2022-23371 · Atos · Atos Unify Openscape Branch +1
Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape SBC versions 9 through 10 before 10R2.2.1 Atos Unify OpenScape Branch versions 9 through 10 before 10R2.1.1 Atos Unify OpenScape BCF version 10 before 10R9.12.1 Description: A remote code execution issue may allow an...
Atos Unify OpenScape 安全漏洞
Atos Unify OpenScape SBC and others are products of Atos France.Atos Unify OpenScape SBC is a datacenter-ready virtualized security application.Atos Unify OpenScape Branch is a virtual appliance or standard server application.Atos Unify OpenScape BCF is a unified communications and collaboration...
WordPress Unify plugin <= 3.2.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered in WordPress Unify plugin versions = 3.2.5. Solution Update the WordPress Unify plugin to the latest available version at least 3.3.0...
WordPress Unify plugin <= 3.2.5 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress Unify plugin versions = 3.2.5. Solution Update the WordPress Unify plugin to the latest available version at least 3.3.0...
CVE-2019-19865
Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS. An attacker could exploit this by convincing an authenticated user to inject arbitrary JavaScript code in the Profile Name field. A browser would execute this stored XSS payload...
CVE-2019-19866
Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information. By iterating the value of conferenceId to getMailFunction in the JSON API, one can enumerate all conferences scheduled on the platform, with...
Design/Logic Flaw
Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information. By iterating the value of conferenceId to getMailFunction in the JSON API, one can enumerate all conferences scheduled on the platform, with...
Cross site scripting
Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS. An attacker could exploit this by convincing an authenticated user to inject arbitrary JavaScript code in the Profile Name field. A browser would execute this stored XSS payload...
CVE-2019-19865
CVE-2019-19865 affects Atos Unify OpenScape UC Application: V9 (before R4.31.0) and V10 (before R0.6.0). The vulnerability is a stored XSS in the Profile Name field that can be triggered when an authenticated user is convinced to inject arbitrary JavaScript, leading to execution in the user’s bro...
CVE-2019-19865
Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS. An attacker could exploit this by convincing an authenticated user to inject arbitrary JavaScript code in the Profile Name field. A browser would execute this stored XSS payload...
CVE-2019-19866
Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information. By iterating the value of conferenceId to getMailFunction in the JSON API, one can enumerate all conferences scheduled on the platform, with...
CVE-2019-19866
CVE-2019-19866 affects Atos Unify OpenScape UC Web Client: OpenScape UC Web Client V9 before R4.31.0 and V10 before R0.6.0 are vulnerable. An attacker can enumerate all scheduled conferences by iterating conferenceId in the JSON API getMailFunction, exposing conference numbers and access PINs. Th...