xceedium xsuite 2.4.3.0 vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the fileName parameter.

Xceedium Xsuite 2.3.0 Xceedium Xsuite 2.4.3.0

1 EDB exploit

Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and previous versions allows remote malicious users to read arbitrary files via a ....// (quadruple dot double slash) in the logFile parameter.

Xceedium Xsuite 2.3.0 Xceedium Xsuite 2.4.3.0

1 EDB exploit

Multiple hardcoded credentials in Xsuite 2.x.

Xceedium Xsuite 2.4.3.0 Xceedium Xsuite 2.3.0

1 EDB exploit

The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system.

Xceedium Xsuite 2.3.0 Xceedium Xsuite 2.4.3.0

1 EDB exploit

Open redirect vulnerability in Xsuite 2.4.4.5 and previous versions allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirurl parameter.

Xceedium Xsuite 2.3.0 Xceedium Xsuite 2.4.3.0

1 EDB exploit

An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and previous versions allows remote malicious users to execute arbitrary commands.

Broadcom Privileged Access Manager Xceedium Xsuite 2.4.3.0 Xceedium Xsuite 2.3.0

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook