deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-3796
Published: 2013-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html
CVE: CVE-2013-3797
Published: 2013-07-17
Description: Unspecified vulnerability in Oracle Solaris 11 allows local users to affect availability via unknown vectors related to Filesystem/DevFS.
CVSS Score: 4.7 (MEDIUM)
References: http://osvdb.org/95315; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html; http://www.securityfocus.com/bid/61239
CVE: CVE-2013-3798
Published: 2013-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote attackers to affect integrity and availability via unknown vectors related to MemCached.
CVSS Score: 5.8 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html
CVE: CVE-2013-3799
Published: 2013-07-17
Description: Unspecified vulnerability in Oracle Solaris 10 and 11, when running on AMD64, allows local users to affect availability via unknown vectors related to Kernel.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/95313; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html; http://www.securityfocus.com/bid/61273
CVE: CVE-2013-3800
Published: 2013-07-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Business Interlinks.
CVSS Score: 6.4 (MEDIUM)
References: http://osvdb.org/95291; http://secunia.com/advisories/54233; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html
CVE: CVE-2013-3801
Published: 2013-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Options.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html
CVE: CVE-2013-3802
Published: 2013-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Full Text Search.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html
CVE: CVE-2013-3803
Published: 2013-07-17
Description: Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.1.3, 11.1.1.4.107 and earlier, 11.1.2.1.129 and earlier, and 11.1.2.2.305 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Intelligence Service.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/95277; http://secunia.com/advisories/54220; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html
CVE: CVE-2013-3804
Published: 2013-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html
CVE: CVE-2013-3805
Published: 2013-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Prepared Statements.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html
CVE: CVE-2013-3806
Published: 2013-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-3811.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html
CVE: CVE-2013-3807
Published: 2013-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Server Privileges.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html
CVE: CVE-2013-3808
Published: 2013-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Options.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html
CVE: CVE-2013-3809
Published: 2013-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Audit Log.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html
CVE: CVE-2013-3810
Published: 2013-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA Transactions.
CVSS Score: 3.5 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html
CVE: CVE-2013-3811
Published: 2013-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-3806.
CVSS Score: 3.5 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html
CVE: CVE-2013-3812
Published: 2013-07-17
Description: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Replication.
CVSS Score: 3.5 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html; http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html
CVE: CVE-2013-3813
Published: 2013-07-17
Description: Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality and integrity via vectors related to Libraries/PAM-Unix.
CVSS Score: 5.8 (MEDIUM)
References: http://osvdb.org/95310; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html; https://exchange.xforce.ibmcloud.com/vulnerabilities/85697
CVE: CVE-2013-3816
Published: 2013-07-17
Description: Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Determinations Engine.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/95302; http://secunia.com/advisories/54234; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html
CVE: CVE-2013-3818
Published: 2013-07-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2013-2404.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/95298; http://secunia.com/advisories/54233; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html
CVE: CVE-2013-3819
Published: 2013-07-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and availability via unknown vectors related to Mobile Applications.
CVSS Score: 6.4 (MEDIUM)
References: http://osvdb.org/95293; http://secunia.com/advisories/54233; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html
CVE: CVE-2013-3820
Published: 2013-07-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect availability via unknown vectors related to Business Interlink.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/95295; http://secunia.com/advisories/54233; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html
CVE: CVE-2013-3821
Published: 2013-07-17
Description: Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and availability via unknown vectors related to Integration Broker.
CVSS Score: 6.4 (MEDIUM)
References: http://osvdb.org/95292; http://secunia.com/advisories/54233; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html
CVE: CVE-2013-3822
Published: 2013-07-17
Description: Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote attackers to affect integrity via unknown vectors related to Web Client (CS).
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/95287; http://secunia.com/advisories/54230; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html
CVE: CVE-2013-3823
Published: 2013-07-17
Description: Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Security.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/95290; http://secunia.com/advisories/54230; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html
CVE: CVE-2013-3824
Published: 2013-07-17
Description: Unspecified vulnerability in the Oracle Agile Collaboration Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Manufacturing/Mfg Parts.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/95288; http://secunia.com/advisories/54230; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html
CVE: CVE-2013-3825
Published: 2013-07-17
Description: Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders & Files Attachment.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/95289; http://secunia.com/advisories/54230; http://www.oracle.com/technetwork/topics/security/cpujuly2[PII_REDACTED].html
CVE: CVE-2013-1218
Published: 2013-07-18
Description: Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips
CVE: CVE-2013-1243
Published: 2013-07-18
Description: The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules before 7.1(5)E4, IPS 4500 sensors before 7.1(6)E4, and IPS 4300 sensors before 7.1(5)E4 allows remote attackers to cause a denial of service (MainApp process hang) via malformed IPv4 packets, aka Bug ID CSCtx18596.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips
CVE: CVE-2013-3402
Published: 2013-07-18
Description: An unspecified function in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticated users to execute arbitrary commands via unknown vectors, aka Bug ID CSCuh73440.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/54249; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm; http://secunia.com/advisories/54249
CVE: CVE-2013-3403
Published: 2013-07-18
Description: Multiple untrusted search path vulnerabilities in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allow local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCuh73454.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/54249; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm; http://secunia.com/advisories/54249
CVE: CVE-2013-3404
Published: 2013-07-18
Description: SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, leading to discovery of encrypted credentials by leveraging metadata, aka Bug ID CSCuh01051.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/54249; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm; http://secunia.com/advisories/54249
CVE: CVE-2013-3410
Published: 2013-07-18
Description: Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/54243; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips; http://secunia.com/advisories/54243
CVE: CVE-2013-3411
Published: 2013-07-18
Description: The IDSM-2 drivers in Cisco Intrusion Prevention System (IPS) Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service (device hang) via malformed IPv4 TCP packets, aka Bug ID CSCuh27460.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/54242; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips; http://secunia.com/advisories/54242
CVE: CVE-2013-3412
Published: 2013-07-18
Description: SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuh81766.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/54249; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm; http://secunia.com/advisories/54249
CVE: CVE-2013-3433
Published: 2013-07-18
Description: Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02276.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/95404; http://secunia.com/advisories/54249; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm
CVE: CVE-2013-3434
Published: 2013-07-18
Description: Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local users to gain privileges by leveraging unspecified file-permission and environment-variable issues for privileged programs, aka Bug ID CSCui02242.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/95403; http://secunia.com/advisories/54249; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm
CVE: CVE-2013-4869
Published: 2013-07-18
Description: Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) and the IM & Presence Service in Cisco Unified Presence Server through 9.1(2) use the same CTI and database-encryption key across different customers' installations, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key, aka Bug IDs CSCsc69187 and CSCui01756.  NOTE: the vendor has provided a statement that the "hard-coded static encryption key is considered a hardening issue rather than a vulnerability, and as such, has a CVSS score of 0/0."
CVSS Score: 0.0 (LOW)
CWE: CWE-522
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm; https://exchange.xforce.ibmcloud.com/vulnerabilities/85883; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm
CVE: CVE-2013-3420
Published: 2013-07-18
Description: Cross-site request forgery (CSRF) vulnerability in the web framework on the Cisco Identity Services Engine (ISE) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh25506.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3420; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3420
CVE: CVE-2013-3426
Published: 2013-07-18
Description: The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh52810.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3426; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3426
CVE: CVE-2013-1606
Published: 2013-07-18
Description: Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.coresecurity.com/advisories/buffer-overflow-ubiquiti-aircam-rtsp-service; http://www.exploit-db.com/exploits/26138/; http://www.coresecurity.com/advisories/buffer-overflow-ubiquiti-aircam-rtsp-service
CVE: CVE-2013-3665
Published: 2013-07-18
Description: Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file.
CVSS Score: 6.8 (MEDIUM)
References: http://images.autodesk.com/adsk/files/Autodesk_AutoCAD_Code_Execution_Vulnerability_Hotfix_Readme.pdf; http://usa.autodesk.com/adsk/servlet/ps/dl/item?id=21972896&linkID=9240618&siteID=123112; http://images.autodesk.com/adsk/files/Autodesk_AutoCAD_Code_Execution_Vulnerability_Hotfix_Readme.pdf
CVE: CVE-2013-4668
Published: 2013-07-18
Description: Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2013-07/0039.html; http://lists.opensuse.org/opensuse-updates/2013-07/msg00095.html; http://secunia.com/advisories/54351
CVE: CVE-2013-4778
Published: 2013-07-18
Description: core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to obtain sensitive server and statistics information via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/60555; https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130614-0_Siemens_OpenScape_Branch_SBC_Multiple_Vulnerabilities_v10.txt; http://www.securityfocus.com/bid/60555
CVE: CVE-2013-4779
Published: 2013-07-18
Description: Cross-site scripting (XSS) vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/60555; https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130614-0_Siemens_OpenScape_Branch_SBC_Multiple_Vulnerabilities_v10.txt; http://www.securityfocus.com/bid/60555
CVE: CVE-2013-4780
Published: 2013-07-18
Description: core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/60555; https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130614-0_Siemens_OpenScape_Branch_SBC_Multiple_Vulnerabilities_v10.txt; http://www.securityfocus.com/bid/60555
CVE: CVE-2013-4781
Published: 2013-07-18
Description: core/getLog.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to execute arbitrary commands via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-78
References: http://www.securityfocus.com/bid/60555; https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130614-0_Siemens_OpenScape_Branch_SBC_Multiple_Vulnerabilities_v10.txt; http://www.securityfocus.com/bid/60555