CVE-2022-21382

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21381

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21382

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

Design/Logic Flaw

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21382

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21382

CVE-2022-21382 affects Oracle Communications’ Oracle Enterprise Session Border Controller (WebUI) for the 8.4 and 9.0 ranges. A low-privilege, network-accessible attacker (via HTTP) can compromise the device, potentially enabling unauthorized creation, deletion or modification of data on the ECSB...

CVE-2022-21381

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21381

The CVE-2022-21381 entry concerns Oracle Communications’ Oracle Enterprise Session Border Controller (ESC) WebUI. Affected versions are 8.4 and 9.0. The vulnerability allows a low-privilege attacker who can reach the device over HTTP to compromise the ESC, potentially leading to unauthorized upda...

CVE-2022-21381: Undefined Security Weakness

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21382: Undefined Security Weakness

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

PT-2022-2208

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Session Border Controller versions 8.4 through 9.0 Description The issue is related to insufficient input validation in the WebUI component of the Oracle Enterprise Session Border Controller. This allows a low-privileged...

PT-2022-2209

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Session Border Controller versions 8.4 and 9.0 Description The issue is related to insufficient input validation in the WebUI component of the Oracle Enterprise Session Border Controller. This allows a low-privileged attacker...

PT-2022-2111

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 100.0.4896.60 Microsoft Edge affected versions not specified Description The issue is related to a heap buffer overflow in the WebUI of Google Chrome and Microsoft Edge, which can be exploited by a remote attack...

PT-2022-1387

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 100.0.4896.60 Description The issue is related to a use after free in the WebUI of Google Chrome, which can be exploited by a remote attacker who convinces a user to engage in specific user interaction,...

PT-2022-1388

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 100.0.4896.60 Description The issue is related to a heap buffer overflow in the WebUI of Google Chrome, which can be exploited by a remote attacker through specific user interaction and input into DevTools,...

AgentTesla Builder Web Panel SQL Injection

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/db9629508fda139f71f625d764c7eff7B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: AgentTesla Builder Web Panel Vulnerability: SQL Injection Description: The AgentTeslaBuilder WebUI...

Win32.MarsStealer Web Panel Cross Site Scripting

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/8abb41f6e7010d70c90f65fd9a740faaB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Win32.MarsStealer Web Panel Vulnerability: Unauthenticated Remote Persistent XSS Description: The...

AgentTesla Builder Web Panel Cross Site Scripting

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/db9629508fda139f71f625d764c7eff7.txt Contact: [email protected] Media: twitter.com/malvuln Threat: AgentTesla Builder Web Panel Vulnerability: Cross Site Scripting XSS Description: AgentTeslaBuilder...

Ab Stealer Web Panel Cross Site Scripting Vulnerability

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/9e44c10307aa8194753896ecf8102167.txt Contact: email protected Media: twitter.com/malvuln Threat: Ab Stealer Web Panel Vulnerability: Unauthenticated Remote Persistent XSS Description: The "Ab Stealer"...

AgentTesla Builder Web Panel SQL Injection Vulnerability

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/db9629508fda139f71f625d764c7eff7B.txt Contact: email protected Media: twitter.com/malvuln Threat: AgentTesla Builder Web Panel Vulnerability: SQL Injection Description: The AgentTeslaBuilder WebUI uses...