Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

server configuration wizard vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2004-2600
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote malicious users to obtain sensitive information when LAN ma...
Intel Cli Auto-configuration UtilityIntel Carrier Grade Server Tsrmt2Intel Client System Setup UtilityIntel Server Configuration WizardIntel Carrier Grade Server Tigpr2uIntel Carrier Grade Server Tsrlt2Intel Server ControlIntel System Setup UtilityIntel Entry Server Platform Sr1325tp1-eIntel Server Board Scb2Intel Server Platform Sr870bn4Intel Server Platform Srsh4Hp Carrier Grade Server Cc2300 A6898aHp Carrier Grade Server Cc2300 A6899aHp Carrier Grade Server Cc3300 A6900aIntel Server Board Sds2Intel Server Board Se7500wv2Hp Carrier Grade Server Cc3310 A9863aIntel Entry Server Board Se7210tp1-eIntel Server Platform Spsh4Intel Server Platform Sr870bh2Hp Carrier Grade Server Cc3300 A6901a
5
CVSSv2
CVE-2020-6286
The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated malicious user to exploit a method to download zip files to a specific directory, leadin...
Sap Netweaver Application Server Java 7.30Sap Netweaver Application Server Java 7.31Sap Netweaver Application Server Java 7.40Sap Netweaver Application Server Java 7.50
10
CVSSv2
CVE-2020-6287
SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks to perform critical actions against the SAP Java system, including the...
Sap Netweaver Application Server Java 7.30Sap Netweaver Application Server Java 7.31Sap Netweaver Application Server Java 7.40Sap Netweaver Application Server Java 7.50
2.1
CVSSv2
CVE-2005-4755
BEA WebLogic Server and WebLogic Express 8.1 SP3 and previous versions (1) stores the private key passphrase (CustomTrustKeyStorePassPhrase) in cleartext in nodemanager.config; or, during domain creation with the Configuration Wizard, renders an SSL private key passphrase in clea...
Bea Weblogic Server 8.1
6.4
CVSSv2
CVE-2016-3974
XML external entity (XXE) vulnerability in the Configuration Wizard in SAP NetWeaver Java AS 7.1 up to and including 7.5 allows remote malicious users to cause a denial of service, conduct SMB Relay attacks, or access arbitrary files via a crafted XML request to _tc~monitoring~we...
Sap Netweaver Application Server Java
4
CVSSv2
CVE-2020-8145
The UniFi Video Server (Windows) web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement sufficient privilege checks. Low privileged users, belonging to the PUBLIC_GROUP or CUSTOM_GROUP groups, can access...
Ui Unifi Video
4.3
CVSSv2
CVE-2016-4948
Multiple cross-site scripting (XSS) vulnerabilities in Cloudera Manager 5.5 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) Template Name field when renaming a template; (2) KDC Server host, (3) Kerberos Security Realm, (4) Ke...
Cloudera Manager
10
CVSSv2
CVE-2008-4390
The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote malicious users to obtain sensitive information such as passwords by sniffing the network.
Cisco Linksys Wvc54gc Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook