266251
|
- |
|
fujitsu
|
e-pares
|
Session fixation vulnerability in Fujitsu e-Pares V01 L01, L03, L10, L20, L30 allows remote attackers to hijack web sessions via unspecified vectors.
|
CWE-287
Improper Authentication
|
CVE-2010-2149
|
2010-09-21 13:00 |
2010-06-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266252
|
- |
|
ibm
|
filenet_p8_application_engine
|
Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 and 4.0.2.x before 4.0.2.7-P8AE-FP007 allow …
|
CWE-79
Cross-site Scripting
|
CVE-2010-3470
|
2010-09-21 13:00 |
2010-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266253
|
- |
|
ibm
|
filenet_p8_application_engine
|
Session fixation vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.7-P8AE-FP007 allows remote attackers to hijack web sessions via uns…
|
CWE-287
Improper Authentication
|
CVE-2010-3471
|
2010-09-21 13:00 |
2010-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266254
|
- |
|
ibm
|
filenet_p8_application_engine
|
Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 allow remote attackers to inject arbitrary w…
|
CWE-79
Cross-site Scripting
|
CVE-2010-3472
|
2010-09-21 13:00 |
2010-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266255
|
- |
|
ibm
|
filenet_p8_application_engine
|
Open redirect vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-021 allows remote attackers to redirect users to arbitrary web sites and…
|
CWE-20
Improper Input Validation
|
CVE-2010-3473
|
2010-09-21 13:00 |
2010-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266256
|
- |
|
ibm
|
filenet_p8_application_engine
|
The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007, in certain FileTracker configurations, does not apply a secu…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-4998
|
2010-09-21 13:00 |
2010-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266257
|
- |
|
ibm
|
filenet_p8_application_engine
|
Cross-site scripting (XSS) vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-016 allows remote attackers to inject arbitrary web script …
|
CWE-79
Cross-site Scripting
|
CVE-2009-4999
|
2010-09-21 13:00 |
2010-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266258
|
- |
|
ibm
|
filenet_p8_application_engine
|
Multiple cross-site scripting (XSS) vulnerabilities in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.3-P8AE-FP003 allow remote attackers to inject …
|
CWE-79
Cross-site Scripting
|
CVE-2009-5000
|
2010-09-21 13:00 |
2010-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266259
|
- |
|
ibm
|
filenet_p8_application_engine
|
The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's Creator-Owner full control over an annotation object, even if the de…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-5001
|
2010-09-21 13:00 |
2010-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266260
|
- |
|
ibm
|
filenet_p8_application_engine
|
The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.1-P8AE-FP001 does not record Get Content Failure Audit events, which might allow remote attackers to …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2009-5002
|
2010-09-21 13:00 |
2010-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|