deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-5134
Published: 2013-09-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was assigned to an issue that is not within the scope of CVE.  Notes: none
CVE: CVE-2013-5137
Published: 2013-09-19
Description: IOKit in Apple iOS before 7 allows attackers to send user-interface events to the foreground app by leveraging control over a background app and using the (1) task-completion API or (2) VoIP API.
CVSS Score: 2.6 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5138
Published: 2013-09-19
Description: IOCatalogue in IOKitUser in Apple iOS before 7 allows attackers to cause a denial of service (NULL pointer dereference and device crash) via a crafted application.
CVSS Score: 4.7 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5139
Published: 2013-09-19
Description: The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds array access) via a crafted application.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886
CVE: CVE-2013-5140
Published: 2013-09-19
Description: The kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (assertion failure and device restart) via an invalid packet fragment.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5141
Published: 2013-09-19
Description: The kernel in Apple iOS before 7 uses an incorrect data size for a certain integer variable, which allows attackers to cause a denial of service (infinite loop and device hang) via a crafted application, related to an "integer truncation vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5142
Published: 2013-09-19
Description: The kernel in Apple iOS before 7 does not initialize unspecified kernel data structures, which allows local users to obtain sensitive information from kernel stack memory via the (1) msgctl API or (2) segctl API.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5145
Published: 2013-09-19
Description: kextd in Kext Management in Apple iOS before 7 does not properly verify authorization for IPC messages, which allows local users to (1) load or (2) unload kernel extensions via a crafted message.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html; http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886
CVE: CVE-2013-5147
Published: 2013-09-19
Description: Passcode Lock in Apple iOS before 7 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement by leveraging a race condition involving phone calls and ejection of a SIM card.
CVSS Score: 3.7 (LOW)
CWE: CWE-362
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5149
Published: 2013-09-19
Description: The Push Notifications subsystem in Apple iOS before 7 provides the push-notification token to an app without user approval, which allows attackers to obtain sensitive information via an app that employs a crafted push-notification registration process.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5150
Published: 2013-09-19
Description: The history-clearing feature in Safari in Apple iOS before 7 does not clear the back/forward history of an open tab, which allows physically proximate attackers to obtain sensitive information by leveraging an unattended workstation.
CVSS Score: 1.9 (LOW)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html; http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5151
Published: 2013-09-19
Description: Mobile Safari in Apple iOS before 7 does not prevent HTML interpretation of a document served with a text/plain content type, which allows remote attackers to conduct cross-site scripting (XSS) attacks by uploading a file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5152
Published: 2013-09-19
Description: Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5153
Published: 2013-09-19
Description: Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proximate attackers to read notifications via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5154
Published: 2013-09-19
Description: The Sandbox subsystem in Apple iOS before 7 determines the sandboxing requirement for a #! application on the basis of the script interpreter instead of the script, which allows attackers to bypass intended access restrictions via a crafted application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5155
Published: 2013-09-19
Description: The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service (infinite loop) via an application that writes crafted values to /dev/random.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://support.apple.com/kb/HT5934; http://www.securitytracker.com/id/1029054
CVE: CVE-2013-5156
Published: 2013-09-19
Description: The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackers to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5157
Published: 2013-09-19
Description: The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, which allows attackers to post Tweets via a crafted app that sends direct requests to the daemon.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886; http://support.apple.com/kb/HT5934
CVE: CVE-2013-5158
Published: 2013-09-19
Description: The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allows physically proximate attackers to obtain sensitive information about recent Twitter interaction via unspecified vectors.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://support.apple.com/kb/HT5934; http://www.securitytracker.com/id/1029054
CVE: CVE-2013-5159
Published: 2013-09-19
Description: WebKit in Apple iOS before 7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive information about use of the window.webkitRequestAnimationFrame API via an IFRAME element.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html; http://secunia.com/advisories/54886; http://support.apple.com/kb/HT5934
CVE: CVE-2013-1121
Published: 2013-09-19
Description: The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service (device reload) via a crafted AS path set, aka Bug ID CSCuf49554.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-399
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1121; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1121
CVE: CVE-2013-5497
Published: 2013-09-19
Description: The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens, which allows remote attackers to cause a denial of service (intermittent MainApp hang) via a crafted management-interface connection request, aka Bug ID CSCuf20148.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://osvdb.org/97525; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5497; http://tools.cisco.com/security/center/viewAlert.x?alertId=30913
CVE: CVE-2013-4068
Published: 2013-09-20
Description: Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka SPR PTHN9ADPA8.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: http://www-01.ibm.com/support/docview.wss?uid=swg21649476; http://www-01.ibm.com/support/docview.wss?uid=swg21650034; http://www-01.ibm.com/support/docview.wss?uid=swg21650146
CVE: CVE-2013-4706
Published: 2013-09-20
Description: The SSH implementation on the D-Link Japan DWL-2100AP with firmware before R252JP-RC572 allows remote authenticated users to cause a denial of service (reboot) by leveraging login access.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN03082733/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000089; http://jvn.jp/en/jp/JVN03082733/index.html
CVE: CVE-2013-4707
Published: 2013-09-20
Description: The SSH implementation on D-Link Japan DES-3810 devices with firmware before R2.20.011 allows remote authenticated users to cause a denial of service (device hang) by leveraging login access.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN70245052/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000090; http://jvn.jp/en/jp/JVN70245052/index.html
CVE: CVE-2013-4709
Published: 2013-09-20
Description: Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware before 2.82, SEIL/X1 with firmware before 4.32, SEIL/X2 with firmware before 4.32, SEIL/B1 with firmware before 4.32, SEIL/Turbo with firmware before 2.16, and SEIL/neu 2FE Plus with firmware before 2.16 allows remote attackers to execute arbitrary code via a crafted L2TP message.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://jvn.jp/en/jp/JVN43152129/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2013-000092; http://www.seil.jp/support/security/a01396.html
CVE: CVE-2010-5290
Published: 2013-09-20
Description: The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different vulnerability than CVE-2010-2861.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://osvdb.org/97553; http://qualys.immunityinc.com/home/exploitpack/CANVAS/CF_directory_traversal; http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/
CVE: CVE-2012-4072
Published: 2013-09-20
Description: The KVM subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4072; http://www.securitytracker.com/id/1029067; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4072
CVE: CVE-2012-4073
Published: 2013-09-20
Description: The KVM subsystem in the client in Cisco Unified Computing System (UCS) does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers, and read or modify KVM data, via a crafted certificate, aka Bug ID CSCte90332.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4073; http://www.securitytracker.com/id/1029068; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4073
CVE: CVE-2012-4074
Published: 2013-09-20
Description: The Board Management Controller (BMC) in the Serial over LAN (SoL) subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded private key, which allows man-in-the-middle attackers to obtain sensitive information or modify the data stream by leveraging knowledge of this key, aka Bug ID CSCte90338.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-255
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4074; http://www.securitytracker.com/id/1029073; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4074
CVE: CVE-2012-4083
Published: 2013-09-20
Description: Multiple buffer overflows in the administrative web interface in Cisco Unified Computing System (UCS) allow remote authenticated users to cause a denial of service (memory corruption and session termination) via long string values for unspecified parameters, aka Bug ID CSCtg20751.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4083; http://www.securitytracker.com/id/1029066; https://exchange.xforce.ibmcloud.com/vulnerabilities/87338
CVE: CVE-2012-4093
Published: 2013-09-20
Description: The Manager component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via an invalid Smart Call Home contact address, aka Bug ID CSCtl00186.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4093; http://www.securitytracker.com/id/1029074; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4093
CVE: CVE-2013-1130
Published: 2013-09-20
Description: Cisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory, which allows local users to gain privileges via a crafted library file, aka Bug ID CSCue33619.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1130; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1130
CVE: CVE-2013-5500
Published: 2013-09-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in the oraadmin service page in Cisco MediaSense allow remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuj23320, CSCuj23324, CSCuj23333, and CSCuj23338.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5500; http://www.securityfocus.com/bid/62575; http://www.securitytracker.com/id/1029064
CVE: CVE-2013-5501
Published: 2013-09-20
Description: Cross-site scripting (XSS) vulnerability in the oraservice page in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj23328.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5501; http://www.securityfocus.com/bid/62574; http://www.securitytracker.com/id/1029064
CVE: CVE-2012-4081
Published: 2013-09-20
Description: MCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (application crash) via invalid MCTools parameters, aka Bug ID CSCtg20734.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4081; http://www.securitytracker.com/id/1029065; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4081
CVE: CVE-2012-4082
Published: 2013-09-20
Description: MCTools in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to gain privileges by entering crafted command-line parameters on a Fabric Interconnect device, aka Bug ID CSCtg20749.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4082; http://www.securitytracker.com/id/1029062; https://exchange.xforce.ibmcloud.com/vulnerabilities/87337
CVE: CVE-2013-3473
Published: 2013-09-20
Description: The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote attackers to discover usernames and passwords via an HTTP request, aka Bug ID CSCud32600.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-pc; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-pc
CVE: CVE-2013-0596
Published: 2013-09-20
Description: Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM73445; http://www.ibm.com/support/docview.wss?uid=swg21647522; https://exchange.xforce.ibmcloud.com/vulnerabilities/83608
CVE: CVE-2013-4052
Published: 2013-09-20
Description: Cross-site scripting (XSS) vulnerability in the UDDI Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM91892; http://www.ibm.com/support/docview.wss?uid=swg21647522; https://exchange.xforce.ibmcloud.com/vulnerabilities/86504
CVE: CVE-2013-4053
Published: 2013-09-20
Description: The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly verify X.509 certificates, which allows remote attackers to obtain privileged access via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM90949; http://www-01.ibm.com/support/docview.wss?uid=swg1PM91521; http://www.ibm.com/support/docview.wss?uid=swg21647522
CVE: CVE-2013-4815
Published: 2013-09-20
Description: Cross-site scripting (XSS) vulnerability in the web interface in HP ArcSight Enterprise Security Manager (ESM) before 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03901176; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03901176
CVE: CVE-2013-5696
Published: 2013-09-23
Description: inc/central.class.php in GLPI before 0.84.2 does not attempt to make install/install.php unavailable after an installation is completed, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and (1) perform a SQL injection via an Etape_4 action or (2) execute arbitrary PHP code via an update_1 action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.glpi-project.org/spip.php?page=annonce&id_breve=308; https://forge.indepnet.net/issues/4480; https://forge.indepnet.net/projects/glpi/repository/revisions/21753
CVE: CVE-2013-4325
Published: 2013-09-23
Description: The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-updates/2013-10/msg00062.html; http://lists.opensuse.org/opensuse-updates/2013-11/msg00000.html; http://rhn.redhat.com/errata/RHSA-2013-1274.html
CVE: CVE-2013-4814
Published: 2013-09-23
Description: Cross-site scripting (XSS) vulnerability in HP XP P9000 Command View Advanced Edition Suite Software 7.x before 7.5.0-02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03898171; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03898171
CVE: CVE-2013-4817
Published: 2013-09-23
Description: Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote attackers to obtain sensitive information via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03918632; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03918632; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03918632
CVE: CVE-2013-4818
Published: 2013-09-23
Description: Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, and IceWall File Manager 3.0 through SP4 allows remote attackers to obtain sensitive information via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03918632; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03918632; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03918632
CVE: CVE-2013-4819
Published: 2013-09-23
Description: Unspecified vulnerability in HP IceWall SSO Agent Option 8.0 through 10.0 allows remote authenticated users to obtain sensitive information via unknown vectors.
CVSS Score: 3.5 (LOW)
References: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03918632; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03918632; https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03918632