Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

advanced management module vulnerabilities and exploits

(subscribe to this query)
6.4
CVSSv2
CVE-2013-6718
The Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G for IBM BladeCenter systems allows remote malicious users to discover account names and passwords via use of an unspecified interface.
Ibm Advanced Management Module Firmware 3.64
6
CVSSv2
CVE-2022-23302
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBi...
Apache Log4jNetapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4jOracle Weblogic Server 12.2.1.3.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Jdeveloper 12.2.1.3.0Oracle Identity Management Suite 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Network Integrity 7.3.6Oracle Business Process Management Suite 12.2.1.4.0Oracle Advanced Supply Chain Planning 12.2Oracle Advanced Supply Chain Planning 12.1Oracle Communications Unified Inventory Management 7.4.1Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Communications Messaging Server 8.1Oracle Business Intelligence 5.9.0.0.0Oracle Healthcare Foundation 8.1.0
9
CVSSv2
CVE-2022-23307
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
Apache ChainsawApache Log4jQos Reload4jOracle Weblogic Server 12.2.1.3.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Jdeveloper 12.2.1.3.0Oracle Identity Management Suite 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Network Integrity 7.3.6Oracle Business Process Management Suite 12.2.1.4.0Oracle Advanced Supply Chain Planning 12.2Oracle Advanced Supply Chain Planning 12.1Oracle Communications Unified Inventory Management 7.4.1Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Communications Messaging Server 8.1Oracle Business Intelligence 5.9.0.0.0Oracle Healthcare Foundation 8.1.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5
6.8
CVSSv2
CVE-2022-23305
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows malicious users to manipulate the SQL by ent...
Apache Log4jNetapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4jOracle Weblogic Server 12.2.1.3.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Jdeveloper 12.2.1.3.0Oracle Identity Management Suite 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Network Integrity 7.3.6Oracle Business Process Management Suite 12.2.1.4.0Oracle Advanced Supply Chain Planning 12.2Oracle Advanced Supply Chain Planning 12.1Oracle Communications Unified Inventory Management 7.4.1Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Communications Messaging Server 8.1Oracle Business Intelligence 5.9.0.0.0Oracle Healthcare Foundation 8.1.0
5
CVSSv2
CVE-2016-7475
Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles.
F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Protocol Security ModuleF5 Big-ip Link ControllerF5 Big-ip Application Security Manager
4.3
CVSSv2
CVE-2017-6163
In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual server uses the standard configuration of HTTP/2 or SPDY profile with Client SSL profile, and the client initiates a number of con...
F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 12.1.2F5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager 11.6.1F5 Big-ip Advanced Firewall Manager 12.0.0F5 Big-ip Advanced Firewall Manager 12.1.0F5 Big-ip Advanced Firewall Manager 12.1.1F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 11.6.0F5 Big-ip Advanced Firewall Manager 12.1.2F5 Big-ip Access Policy Manager 11.6.1
2.1
CVSSv2
CVE-2006-2166
Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and previous versions, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated malicious users to reset the password for any user w...
Cisco Unity ExpressCisco Unity Express Software 2.2.2Cisco Unity Express Software 1.1.1Cisco Unity Express Software 2.1.1
3.5
CVSSv2
CVE-2013-4007
Cross-site scripting (XSS) vulnerability in adv_sw.php in the Advanced Management Module (AMM) with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Advanced Management Module 2.50Ibm Advanced Management Module 1.28Ibm Advanced Management Module 1.26Ibm Advanced Management Module 1.42Ibm Advanced Management Module 1.36Ibm Advanced Management Module 1.01Ibm Advanced Management Module 2.46Ibm Advanced Management Module 1.34Ibm Advanced Management Module 1.32Ibm Advanced Management Module 2.48Ibm Advanced Management Module 3.54Ibm Advanced Management Module 1.25Ibm Advanced Management ModuleIbm Advanced Management Module 1.20Ibm Advanced Management Module 1.00
4.3
CVSSv2
CVE-2009-1288
Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote malicious users to inject arbitrary web script or HTML via (1) the username in a login action or (2) the P...
Ibm Advanced Management Module 1.36hIbm Bladecenter EIbm Bladecenter SIbm Bladecenter TIbm Bladecenter Hs12Ibm Bladecenter Ls20Ibm Bladecenter Ls21Ibm Bladecenter Ls41Ibm Bladecenter HtIbm Bladecenter HIbm Bladecenter Js21Ibm Bladecenter Hs21Ibm Bladecenter Js22Ibm Bladecenter Hc10Ibm Bladecenter Hs21 XmIbm Bladecenter Js12Ibm Bladecenter Hs20Ibm Bladecenter Qs21Ibm Bladecenter Qs22
5
CVSSv2
CVE-2015-4638
The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.3.0 up to and including 11.5.2 and 11.6.0 up to and including 11.6.0 HF4, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.1 up to and including 11.3.0, and BIG-IP PSM 11....
F5 Big-ip Analytics 11.5.0F5 Big-ip Analytics 11.5.1F5 Big-ip Analytics 11.5.2F5 Big-ip Analytics 11.6.0F5 Big-ip Global Traffic Manager 11.5.0F5 Big-ip Global Traffic Manager 11.5.1F5 Big-ip Global Traffic Manager 11.5.2F5 Big-ip Global Traffic Manager 11.6.0F5 Big-ip Link Controller 11.3.0F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Policy Enforcement Manager 11.3.0F5 Big-ip Policy Enforcement Manager 11.4.0F5 Big-ip Policy Enforcement Manager 11.4.1F5 Big-ip Advanced Firewall Manager 11.6.0F5 Big-ip Analytics 11.4.0F5 Big-ip Application Security Manager 11.4.0F5 Big-ip Application Security Manager 11.5.0F5 Big-ip Edge Gateway 11.2.1F5 Big-ip Global Traffic Manager 11.4.0F5 Big-ip Link Controller 11.4.0F5 Big-ip Link Controller 11.5.0F5 Big-ip Local Traffic Manager 11.5.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook