CVE-2016-3005

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-299...

CVE-2016-2997

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-300...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-299...

CVE-2016-3010

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-299...

CVE-2016-2995

CVE-2016-2995 concerns a Cross-site scripting (XSS) vulnerability in the Web UI of IBM Connections. The flaw affects IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1. It allows remote authenticated users to inject arbitrary web script or HTML via unspecified ve...

CVE-2016-3005

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-299...

CVE-2016-3005

The CVE-2016-3005 entry describes a Cross-site scripting (XSS) vulnerability in the Web UI of IBM Connections across several versions: 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspe...

CVE-2016-3010

CVE-2016-3010 is a cross-site scripting (XSS) vulnerability affecting IBM Connections Web UI. The issue spans IBM Connections versions 4.0–CR4, 4.5–CR5, 5.0 before CR4, and 5.5 before CR1, allowing remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The desc...

CVE-2016-3010

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-299...

CVE-2016-3008

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956...

CVE-2016-2954

CVE-2016-2954 is an XSS vulnerability in the IBM Connections Web UI. Affects IBM Connections 5.0 before CR4 and 5.5 before CR1; remote authenticated users can inject arbitrary web script or HTML via unspecified vectors. This entry is differentiated from CVE-2016-2956 and CVE-2016-3008. The provid...

CVE-2016-2956

CVE-2016-2956 is an XSS vulnerability in the IBM Connections Web UI affecting 5.0 before CR4 and 5.5 before CR1, exploitable by remote authenticated users via unspecified vectors. The available data does not specify the exact vulnerable component, exploit paths, successful impact beyond injected ...

CVE-2016-2997

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-300...

CVE-2016-2954

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2956 and CVE-2016-3008...

CVE-2016-5383

The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters."...

Code injection

The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters."...

CVE-2016-5383

The web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code via vectors involving "Lack of field filters."...

CVE-2016-5383

The CVE-2016-5383 issue affects Red Hat CloudForms Management Engine (CFME) 4.1, where the web UI did not properly filter input in certain fields, allowing remote authenticated attackers to execute arbitrary code on the host. Root cause: insufficient input filtering (listed as “Lack of field filt...

Cisco UCS Central Software Web UI Detection

Binary data ciscoucscentralwebuidetect.nbin...

Unspecified Cross-Site Scripting Vulnerability in OSSEC Web UI

OSSEC's Web UI is using an open source web interface OSSEC HIDS Security. An unspecified cross-site scripting vulnerability exists in the OSSEC Web UI. An attacker may be able to exploit the vulnerability to execute arbitrary script code in a trusted user's browser at an affected site. Allowing a...