Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-0889 State: PUBLISHED Published: 2016-04-15T14:00:00 Last Updated: 2024-08-05T22:38:39.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to write to arbitrary files via a crafted pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035580 - http://seclists.org/bugtraq/2016/Apr/83
CVE ID: CVE-2016-0890 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-05T22:38:39.956Z Vendors: n/a Products: EMC PowerPath Virtual (Management) Appliance EMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2.0 SP1 Problem Types: Information Disclosure Vulnerability Description: EMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2.0 SP1 is affected by a sensitive information disclosure vulnerability that may potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95
he affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95832 - http://www.securityfocus.com/archive/1/540065/30/0/threaded
CVE ID: CVE-2016-0891 State: PUBLISHED Published: 2016-04-20T17:00:00 Last Updated: 2024-08-05T22:38:39.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/538207/100/0/threaded - https://www.exploit-db.com/exploits/39738/ - https://www.securify.nl/advisory/SFY20141109/emc_m_r__watch4net__lacks_c%20ross_site_request_forgery_protection.html - http://packetstormsecurity.com/files/136837/EMC-ViPR-SRM-Cr
h4net__lacks_c%20ross_site_request_forgery_protection.html - http://packetstormsecurity.com/files/136837/EMC-ViPR-SRM-Cross-Site-Request-Forgery.html - http://seclists.org/fulldisclosure/2016/Apr/89 - http://seclists.org/bugtraq/2016/Apr/106
CVE ID: CVE-2016-0892 State: PUBLISHED Published: 2016-05-03T15:00:00 Last Updated: 2024-08-05T22:38:39.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/May/9 - http://www.securitytracker.com/id/1035714 - http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html
CVE ID: CVE-2016-0893 State: PUBLISHED Published: 2016-05-03T15:00:00 Last Updated: 2024-08-05T22:38:41.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to obtain sensitive information by reading error messages. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/May/9 - http://www.securitytracker.com/id/1035714 - http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html
CVE ID: CVE-2016-0894 State: PUBLISHED Published: 2016-05-03T15:00:00 Last Updated: 2024-08-05T22:38:41.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to bypass intended object access restrictions via a modified parameter. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/May/9 - http://www.securitytracker.com/id/1035714 - http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html
CVE ID: CVE-2016-0895 State: PUBLISHED Published: 2016-05-03T15:00:00 Last Updated: 2024-08-05T22:38:39.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to conduct clickjacking attacks via web-site elements with crafted transparency or opacity. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/May/9 - http://www.securitytracker.com/id/1035714 - http://packetstormsecurity.com/files/136888/RSA-Data-Loss-Prevention-XSS-Information-Disclosure.html
CVE ID: CVE-2016-0896 State: PUBLISHED Published: 2016-09-18T01:00:00 Last Updated: 2024-08-05T22:38:40.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254.0.0/16 in the all_open Application Security Group, which might allow remote attackers to bypass intended network-connectivity restrictions by leveraging access to the 169.254.169.254 address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92161 - https://pivotal.io/security/cve-2016-0896
CVE ID: CVE-2016-0897 State: PUBLISHED Published: 2016-09-18T01:00:00 Last Updated: 2024-08-05T22:38:41.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH access for operators, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2016-0897
CVE ID: CVE-2016-0898 State: PUBLISHED Published: 2018-03-29T22:00:00 Last Updated: 2024-08-05T22:38:41.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were not exposed outside the Service Backup VM. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95146 - https://pivotal.io/security/cve-2016-0898
CVE ID: CVE-2016-0899 State: PUBLISHED Published: 2016-07-04T16:00:00 Last Updated: 2024-08-05T22:38:41.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential information, by modifying the IIS configuration to set a Content-Type header for .bak files. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/Jun/54 - http://www.securitytracker.com/id/1036080
CVE ID: CVE-2016-0900 State: PUBLISHED Published: 2016-05-07T10:00:00 Last Updated: 2024-08-05T22:38:41.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0901. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136994/RSA-Authentication-Manager-XSS-HTTP-Response-Splitting.html - http://seclists.org/bugtraq/2016/May/23 - http://www.securitytracker.com/id/1035755
CVE ID: CVE-2016-0901 State: PUBLISHED Published: 2016-05-07T10:00:00 Last Updated: 2024-08-05T22:38:40.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0900. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136994/RSA-Authentication-Manager-XSS-HTTP-Response-Splitting.html - http://seclists.org/bugtraq/2016/May/23 - http://www.securitytracker.com/id/1035755
CVE ID: CVE-2016-0902 State: PUBLISHED Published: 2016-05-07T10:00:00 Last Updated: 2024-08-05T22:38:41.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/136994/RSA-Authentication-Manager-XSS-HTTP-Response-Splitting.html - http://seclists.org/bugtraq/2016/May/23 - http://www.securitytracker.com/id/1035755
CVE ID: CVE-2016-0903 State: PUBLISHED Published: 2016-09-21T01:00:00 Last Updated: 2024-08-05T22:38:40.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data via a modified client agent. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/Sep/31 - http://www.securityfocus.com/bid/93026 - http://www.securitytracker.com/id/1036844
CVE ID: CVE-2016-0904 State: PUBLISHED Published: 2016-09-21T01:00:00 Last Updated: 2024-08-05T22:38:41.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use the same encryption key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms and obtain sensitive client-server traffic information by leveraging knowledge of this key from another installation. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/Sep/31 - http://www.securityfocus.com/bid/93026 - http://www.securitytrack
eferences: - http://seclists.org/bugtraq/2016/Sep/31 - http://www.securityfocus.com/bid/93026 - http://www.securitytracker.com/id/1036844
CVE ID: CVE-2016-0905 State: PUBLISHED Published: 2016-09-21T01:00:00 Last Updated: 2024-08-05T22:38:41.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root privileges by leveraging admin access and entering a sudo command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93032 - http://seclists.org/bugtraq/2016/Sep/31 - http://www.securitytracker.com/id/1036844
CVE ID: CVE-2016-0906 State: PUBLISHED Published: 2016-07-06T14:00:00 Last Updated: 2024-08-05T22:38:40.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-restore interface in Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar through 7.1.2 and 7.2.x through 7.2.1 allows remote authenticated users to read or delete directories via a Linux backup-restore operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036235 - http://seclists.org/bugtraq/2016/Jul/33
CVE ID: CVE-2016-0907 State: PUBLISHED Published: 2016-05-30T01:00:00 Last Updated: 2024-08-05T22:38:40.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/May/117
CVE ID: CVE-2016-0908 State: PUBLISHED Published: 2016-06-04T01:00:00 Last Updated: 2024-08-05T22:38:41.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root shell access by leveraging administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/Jun/13
CVE ID: CVE-2016-0909 State: PUBLISHED Published: 2016-11-15T19:00:00 Last Updated: 2024-08-05T22:38:40.982Z Vendors: n/a Products: EMC Avamar Data Store (ADS) versions 7.3.0 and older, Avamar Virtual Edition (AVE) versions 7.3.0 and older Problem Types: Improper Privilege Management Description: EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037066 - http://www.securityfocus.com/archive/1/539613 - http://www.securityfocus.com/bid/93788
CVE ID: CVE-2016-0910 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-05T22:38:41.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/Jun/44 - http://www.securitytracker.com/id/1036074
CVE ID: CVE-2016-0911 State: PUBLISHED Published: 2016-06-19T20:00:00 Last Updated: 2024-08-05T22:38:40.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no_root_squash option for NFS exports, which makes it easier for remote attackers to obtain filesystem access by leveraging client root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036079 - http://seclists.org/bugtraq/2016/Jun/50
CVE ID: CVE-2016-0912 State: PUBLISHED Published: 2016-06-19T20:00:00 Last Updated: 2024-08-05T22:38:41.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to (1) a different account with the same role as a target account or (2) an account's session at an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036079 - http://seclists.org/bugtraq/2016/Jun/50
CVE ID: CVE-2016-0913 State: PUBLISHED Published: 2016-10-05T01:00:00 Last Updated: 2024-08-05T22:38:41.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in EMC Replication Manager (RM) before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to execute arbitrary commands by placing a crafted script in an SMB share. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036940 - http://www.securityfocus.com/bid/93348 - http://seclists.org/bugtraq/2016/Oct/6
CVE ID: CVE-2016-0914 State: PUBLISHED Published: 2016-06-23T00:00:00 Last Updated: 2024-08-05T22:38:41.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Documentum WebTop 6.8 before Patch 13 and 6.8.1 before Patch 02, Documentum Administrator 7.x before 7.2 Patch 13, Documentum Capital Projects 1.9 before Patch 23 and 1.10 before Patch 10, and Documentum TaskSpace 6.7 SP3 allow remote authenticated users to bypass intended access restrictions and execute arbitrary IAPI/IDQL commands via the IAPI/IDQL interface. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/Jun/92 - http://www.securitytracker.com/id/1036153
CVE ID: CVE-2016-0915 State: PUBLISHED Published: 2016-08-22T10:00:00 Last Updated: 2024-08-05T22:38:41.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Self-Service Portal in EMC RSA Authentication Manager (AM) Prime Self-Service 3.0 and 3.1 before 3.1 1915.42871 allows remote authenticated users to cause a denial of service (PIN change for an arbitrary user) via a modified token serial number within a PIN change request, related to a "direct object reference vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92394 - http://seclists.org/bugtraq/2016/Aug/71 - http://www.securitytracker.com/id/1036557
CVE ID: CVE-2016-0916 State: PUBLISHED Published: 2016-06-10T01:00:00 Last Updated: 2024-08-05T22:38:41.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote attackers to execute arbitrary commands by leveraging access to a different NetWorker instance. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/Jun/43 - http://www.securitytracker.com/id/1036075
CVE ID: CVE-2016-0917 State: PUBLISHED Published: 2016-09-21T01:00:00 Last Updated: 2024-08-05T22:38:41.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB service in EMC VNXe (VNXe3200 Operating Environment prior to 3.1.5.8711957 and VNXe3100/3150/3300 Operating Environment prior to 2.4.4.22638), VNX1 File OE before 7.1.80.3, VNX2 File OE before 8.1.9.155, and Celerra (all supported versions) does not prevent duplicate NTLM challenge-response nonces, which makes it easier for remote attackers to execute arbitrary code, or read or write to files, via a series of authentication requests, a related issue to CVE-2010-0231. Additional Analyst Notes: - CVE Program Container: R
eries of authentication requests, a related issue to CVE-2010-0231. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036843 - http://www.securityfocus.com/archive/1/539993/30/0/threaded - http://seclists.org/bugtraq/2016/Sep/32 - http://www.securityfocus.com/bid/93023
CVE ID: CVE-2016-0918 State: PUBLISHED Published: 2016-09-24T10:00:00 Last Updated: 2024-08-05T22:38:41.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Popup information via a modified URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93108 - http://seclists.org/bugtraq/2016/Sep/52 - http://www.securitytracker.com/id/1036896
CVE ID: CVE-2016-0919 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-05T22:38:41.067Z Vendors: n/a Products: RSA Web Threat Detection RSA Web Threat Detection version 5.0, RSA Web Threat Detection version 5.1, RSA Web Threat Detection version 5.1.2 Problem Types: Cross Site Scripting Vulnerability Description: EMC RSA Web Threat Detection version 5.0, RSA Web Threat Detection version 5.1, RSA Web Threat Detection version 5.1.2 has a cross site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95820 - http://ww
tem. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95820 - http://www.securitytracker.com/id/1037726 - http://www.securityfocus.com/archive/1/540057/30/0/threaded
CVE ID: CVE-2016-0920 State: PUBLISHED Published: 2016-09-21T01:00:00 Last Updated: 2024-08-05T22:38:41.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 allow local users to obtain root access via a crafted parameter to a command that is available in the sudo configuration. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/Sep/31 - http://www.securitytracker.com/id/1036844
CVE ID: CVE-2016-0921 State: PUBLISHED Published: 2016-09-21T01:00:00 Last Updated: 2024-08-05T22:38:41.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233 use weak permissions for unspecified directories, which allows local users to obtain root access by replacing a script with a Trojan horse program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93032 - http://seclists.org/bugtraq/2016/Sep/31 - http://www.securitytracker.com/id/1036844
CVE ID: CVE-2016-0922 State: PUBLISHED Published: 2016-09-18T01:00:00 Last Updated: 2024-08-05T22:38:41.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force guessing attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92945 - http://seclists.org/bugtraq/2016/Sep/17
CVE ID: CVE-2016-0923 State: PUBLISHED Published: 2016-09-18T01:00:00 Last Updated: 2024-08-05T22:38:41.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.9 and 4.1.x before 4.1.5 places the weakest algorithms first in a signature-algorithm list transmitted to a server, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging server behavior in which the first algorithm is used. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2016/Sep/25 - http://www.securityfocus.com/bid/92994 - http://www.securitytracker.com/id/103683
p://seclists.org/bugtraq/2016/Sep/25 - http://www.securityfocus.com/bid/92994 - http://www.securitytracker.com/id/1036835
CVE ID: CVE-2016-0924 State: REJECTED Published: 2016-09-18T01:00:00 Last Updated: 2016-10-14T16:57:01 Description: No description available.
CVE ID: CVE-2016-0925 State: PUBLISHED Published: 2016-09-21T01:00:00 Last Updated: 2024-08-05T22:38:41.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive Authentication (On-Premise) before 6.0.2.1.SP3.P4 HF210, 7.0.x and 7.1.x before 7.1.0.0.SP0.P6 HF50, and 7.2.x before 7.2.0.0.SP0.P0 HF20 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036851 - http://seclists.org/bugtraq/2016/Sep/33 - http://www.securityfocus.com/bid/93025
CVE ID: CVE-2016-0926 State: PUBLISHED Published: 2016-09-18T01:00:00 Last Updated: 2024-08-05T22:38:41.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apps Manager in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.32 and 1.7.x before 1.7.8 allows remote attackers to inject arbitrary web script or HTML via unspecified input that improperly interacts with the AngularJS framework. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2016-0926 - http://www.securityfocus.com/bid/91677
CVE ID: CVE-2016-0927 State: PUBLISHED Published: 2016-09-18T01:00:00 Last Updated: 2024-08-05T22:38:41.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2016-0927