Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 3:27 a.m.7 views

CVE-2023-26261

In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15...

9.8CVSS7.5AI score0.0084EPSS
Exploits0References1
OSV
OSV
added 2023/03/08 3:15 p.m.4 views

CVE-2023-26261

In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15...

9.8CVSS7.3AI score0.0084EPSS
Exploits0References2
NVD
NVD
added 2023/03/08 3:15 p.m.9 views

CVE-2023-26261

In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15...

9.8CVSS9.8AI score0.0084EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/03/08 12:0 a.m.2 views

PT-2023-20570 · Ubika · Ubika Waap Gateway/Cloud

Name of the Vulnerable Software and Affected Versions: UBIKA WAAP Gateway/Cloud versions prior to 6.11.0 UBIKA WAAP Gateway/Cloud versions prior to 6.5.6-patch15 Description: A blind XPath injection issue leads to an authentication bypass by stealing the session of another connected user...

9.8CVSS9.7AI score0.0084EPSS
Exploits0References7
Cvelist
Cvelist
added 2023/03/08 12:0 a.m.18 views

CVE-2023-26261

In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15...

10AI score0.0084EPSS
Exploits0References2
Rows per page
Query Builder