61 matches found
UPM: upgrade Underscore.js to 1.13.1 or higher
h3. Issue Summary UPM is currently using underscore.js 1.4.4. However, it is being affected due to CVE-2021-23358 The package underscore from 1.13.0-0 and before 1.13.0-2 From 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variabl...
conservatorypark.upm.my Cross Site Scripting vulnerability OBB-2696251
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
UPM - "The Group Policy Client service failed to sign-in. Access is denied" error observed on login
"The Group Policy Client service failed to sign-in. Access is denied" error observed on login to servers after UPM profile migration...
Outlook is unable to launch after Citrix UPM Hotfix ProfilemgtWX64_1912_3001 installation Error status 0xc0000428
After installing theCitrixHotfixProfilemgtWX6419123001, anerror is generated when opening Outlook: OUTLOOK.EXE : Bad Image C:\Program Files\Citrix\User Profile Manager\upmoutlookhook64.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the...
Citrix UPM Log Parser
Citrix UPM Log Parser v1.5 Created Date: Oct 8, 2009 Modified Date: Oct 4, 2016 Please note: You can download the required file from the Citrix downloads website by visiting the following link:https://www.citrix.com/downloads/citrix-tools Description Citrix UPM Log Parser has been designed to hel...
Unvalidated redirects in UPM via reverse tabnapping
Affected versions of Atlassian Jira Server and Data Center allow an authenticated attacker to redirect a user to a malicious website via an unvalidated redirect vulnerability in some Universal Plugin Manager pages, e.g. "Manage apps" and "Find new apps". Affected versions: version 7.13.16 7.14.0 ...
agri.upm.edu.my Cross Site Scripting vulnerability OBB-1201195
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
coscomm.upm.edu.my Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1185350 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
halal.upm.edu.my Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1178234 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Logon process to VDAs is extremely slow when Citrix UPM is enabled
Logon to VDAs is extremely slow when Citrix UPM is enabled. When disabling the Citrix UPM service the logon process is normal. Sophos AV 10.x is installed on the VDAs...
UPM doesn't work randomly after VDA is rebooted
Intermittently UPM profile does not load, if user login immediately after the reboot...
CVE-2018-20233
The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privileges to read files, make network requests and perform a denial of service attack via an XML External Entity vulnerability in the parsing of atlassian...
serdangmemory.upm.edu.my XSS vulnerability
Open Bug Bounty ID: OBB-715640 Description| Value ---|--- Affected Website:| serdangmemory.upm.edu.my Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...
Atlassian Jira Authenticated Upload Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Jira Authenticated Upload Code Execution', 'Description' = %q This module can be used to execute a payload on Atlassian Jira via the...
Citrix UPM + WEM - Google Chrome does not remember user login data
Google Chrome does not remember user login data with any website. Every time users launch Google Chrome in a new Desktop session, they have to type their username even after have enabled the Remember Me option...
UPM Roaming Profiles "Break" if App Layering Elastic Layering is Enabled
UPM roaming profiles "break" if enabling App Layering Elastic Layering feature. Can’t right click the start menu, can’t open programs, etc...
upm.es XSS vulnerability
Open Bug Bounty ID: OBB-560505 Description| Value ---|--- Affected Website:| upm.es Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on ISO...
UPM settings configured through WEM are not applying after second logon to WEM Agent Machine
UPM settings configured through WEM are not applying after second logon to WEM Agent Machine...
High memory usage UPM
There is high memory usage of process userProfileManager.exe on all servers after upgrading to UPM 5.7...
UserProfileManger.exe periodically crashes while UPM 5.8 running in a Windows 32-bit OS
While running UPM 5.8 in a Windows 32-bit OS, customer may suffer a periodical UserProfileManger.exe crash, every 7 days exactly. Windows Application Event will log event 1000 for that crash with exception code 0xc0000005, which indicates memory Access Violation...