Lucene search
K

6 matches found

NVD
NVD
added 2025/12/09 4:18 p.m.1 views

CVE-2025-66631

CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer NDCS and is vulnerable to remote code execution during deserialization...

9.8CVSS0.02819EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 11:13 p.m.18 views

Security Bulletin: Ensure that DataPower services running in production environments are not configured to blindly echo requests. (CVE-2013-0499)

Abstract DataPower services like XML Firewall, Multi Protocol Gateway, Web Service Proxy and Web Token Service when configured to blindly echo requests could result in potential security vulnerability in production environments. Content VULNERABILITY DETAILS: DESCRIPTION: For the purposes of...

4.3CVSS6.1AI score0.00256EPSS
Exploits2Affected Software1
CNVD
CNVD
added 2016/06/02 12:0 a.m.1 views

IBM TRIRIGA Application Platform HTTP Request Forwarding Vulnerability

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

7.7CVSS7AI score0.00138EPSS
Exploits0References1
NVD
NVD
added 2013/05/28 4:55 p.m.20 views

CVE-2013-0499

Cross-site scripting XSS vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gatew...

4.3CVSS5.6AI score0.00256EPSS
Exploits2References4
Prion
Prion
added 2013/05/28 4:55 p.m.18 views

Cross site scripting

Cross-site scripting XSS vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gatew...

4.3CVSS6AI score0.00256EPSS
Exploits2References4Affected Software7
Cvelist
Cvelist
added 2013/05/28 4:0 p.m.17 views

CVE-2013-0499

Cross-site scripting XSS vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gatew...

5.6AI score0.00256EPSS
Exploits2References4
Rows per page
Query Builder