|
265721
|
3.1 |
LOW
Network
|
ibm
|
rational_rhapsody_design_manager
|
An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to perform a JSON Hijacking Attack. A JSON Hijacking Attack may expose to an attacker information passed betw…
|
CWE-200
Information Exposure
|
CVE-2016-9697
|
2024-11-21 12:01 |
2017-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265722
|
5.4 |
MEDIUM
Network
|
ibm
|
rational_rhapsody_design_manager
|
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the secu…
|
CWE-79
Cross-site Scripting
|
CVE-2016-9696
|
2024-11-21 12:01 |
2017-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265723
|
5.4 |
MEDIUM
Network
|
ibm
|
rational_rhapsody_design_manager
|
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pote…
|
CWE-79
Cross-site Scripting
|
CVE-2016-9694
|
2024-11-21 12:01 |
2017-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265724
|
7.5 |
HIGH
Network
|
eaton
|
xcomfort_ethernet_communication_interface
|
An issue was discovered in Eaton xComfort Ethernet Communication Interface (ECI) Versions 1.07 and prior. By accessing a specific uniform resource locator (URL) on the webserver, a malicious user may…
|
CWE-284
Improper Access Control
|
CVE-2016-9368
|
2024-11-21 12:01 |
2017-03-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265725
|
7.5 |
HIGH
Network
|
ibm
|
qradar_security_information_and_event_manager
|
IBM QRadar 7.2 could allow a remote attacker to consume all resources on the server due to not properly restricting the size or amount of resources requested by an actor. IBM Reference #: 1999556.
|
CWE-399
Resource Management Errors
|
CVE-2016-9740
|
2024-11-21 12:01 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265726
|
4.3 |
MEDIUM
Network
|
ibm
|
qradar_security_information_and_event_manager qradar_incident_forensics
|
IBM QRadar Incident Forensics 7.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trus…
|
CWE-352
Origin Validation Error
|
CVE-2016-9730
|
2024-11-21 12:01 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265727
|
6.5 |
MEDIUM
Network
|
ibm
|
qradar_security_information_and_event_manager
|
IBM QRadar 7.2 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM Reference #: 1999545.
|
CWE-287
Improper Authentication
|
CVE-2016-9729
|
2024-11-21 12:01 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265728
|
7.5 |
HIGH
Network
|
ibm
|
qradar_security_information_and_event_manager
|
IBM Qradar 7.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, information in the back-end database. IBM Referen…
|
CWE-89
SQL Injection
|
CVE-2016-9728
|
2024-11-21 12:01 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265729
|
8.5 |
HIGH
Network
|
ibm
|
qradar_security_information_and_event_manager qradar_incident_forensics
|
IBM QRadar 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute…
|
CWE-20
Improper Input Validation
|
CVE-2016-9727
|
2024-11-21 12:01 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265730
|
8.8 |
HIGH
Network
|
ibm
|
qradar_security_information_and_event_manager qradar_incident_forensics
|
IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulne…
|
CWE-20
Improper Input Validation
|
CVE-2016-9726
|
2024-11-21 12:01 |
2017-03-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|