Federico Draghelli

**Name of the Vulnerable Software and Affected Versions** Oracle Database Server versions 19.3 through 19.26 Oracle Database Server versions 21.3 through 21.17 Oracle Database Server versions 23.4 through 23.7 **Description** The issue is related to the XML Database component, allowing a low-privileged attacker with network access via HTTP to compromise the XML Database. Successful attacks require human interaction and can result in unauthorized update, insert, or delete access to some XML Database accessible data, as well as unauthorized read access to a subset of XML Database accessible data. **Recommendations** For versions 19.3 through 19.26, update to a version outside of this range to resolve the issue. For versions 21.3 through 21.17, update to a version outside of this range to resolve the issue. For versions 23.4 through 23.7, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the XML Database component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** IBM Workload Scheduler versions 9.5 through 10.2 **Description** The issue is related to the storage of passwords in plain text. This could allow an attacker to disclose protected information. A local user can read the user credentials stored in plain text. **Recommendations** For versions 9.5 through 10.2, update to a version that stores user credentials securely, avoiding plain text storage. As a temporary workaround, consider restricting access to the areas where credentials are stored to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Italtel Embrace version 1.6.4 **Description** An issue was discovered in the web application where the access token of an authenticated user is inserted inside GET requests. The query string for the URL could be saved in the browser's history, passed through Referers to other web sites, stored in web logs, or otherwise recorded in other sources. If the query string contains sensitive information such as session identifiers, then attackers can use this information to launch further attacks. Because the access token is sent in GET requests, this could lead to complete account takeover. **Recommendations** For Italtel Embrace version 1.6.4, consider disabling the use of access tokens in GET requests as a temporary workaround until a patch is available. Restrict access to sensitive information and session identifiers to minimize the risk of exploitation. Avoid using sensitive information in query strings for URLs to prevent potential recording in browser history, web logs, or other sources. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Italtel Embrace version 1.6.4 **Description** The issue is related to improper input validation in the Web application, allowing authenticated users to execute commands on the Operating System. **Recommendations** For Italtel Embrace version 1.6.4, update the software to a version that properly checks parameters sent as input before they are processed on the server side. As a temporary workaround, consider restricting access to the Web application to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Italtel Embrace version 1.6.4 **Description** An issue was discovered where the server does not properly handle application errors, leading to a disclosure of information about the server. An unauthenticated user can craft specific requests to make the application generate an error, revealing information such as the absolute path of the source code of the application. This information can help an attacker perform other attacks against the system. The issue can be exploited without authentication. **Recommendations** For Italtel Embrace version 1.6.4, consider implementing proper error handling mechanisms to prevent information disclosure. As a temporary workaround, restrict access to error messages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Italtel Embrace version 1.6.4 **Description** An issue was discovered where the web application inserts cleartext passwords in the HTML source code. An authenticated user can edit the configuration of the email server. When accessing the edit function, the web application fills the edit form with the current credentials for the email account, including the cleartext password. **Recommendations** For Italtel Embrace version 1.6.4, consider restricting access to the edit function for the email server configuration to minimize the risk of exploitation. As a temporary workaround, avoid using the edit function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Italtel Embrace version 1.6.4 **Description** An issue was discovered in the product where it does not neutralize or incorrectly neutralizes output that is written to logs. The web application writes logs using a GET query string parameter, which can be modified by an attacker to attribute every action they perform to a different user. This can be exploited without authentication. **Recommendations** For Italtel Embrace version 1.6.4, consider restricting access to the logging functionality to prevent exploitation. As a temporary workaround, avoid using the GET query string parameter for logging until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Italtel Embrace version 1.6.4 **Description** A stored cross-site scripting (XSS) issue allows authenticated and unauthenticated remote attackers to inject arbitrary web script or HTML into a GET parameter. This reflects/stores the user input without sanitization. **Recommendations** For Italtel Embrace version 1.6.4, consider disabling the GET parameter that allows user input until a patch is available to prevent exploitation of the stored cross-site scripting issue. Restrict access to the affected parameter to minimize the risk of arbitrary web script or HTML injection.

**Name of the Vulnerable Software and Affected Versions** Italtel Embrace version 1.6.4 **Description** An issue was discovered where the web server fails to sanitize input data, allowing remote unauthenticated attackers to read arbitrary files on the filesystem. **Recommendations** For Italtel Embrace version 1.6.4, ensure proper input sanitization is implemented in the web server to prevent unauthorized file access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Italtel Embrace version 1.6.4 **Description** An issue was discovered in the web application where it does not restrict or incorrectly restricts access to a resource from an unauthorized actor. **Recommendations** For Italtel Embrace version 1.6.4, consider restricting access to sensitive resources to authorized actors only, until a patch or fix is available.

**Name of the Vulnerable Software and Affected Versions** CODESYS products (affected versions not specified) **Description** The issue is related to a stack-based out-of-bounds write vulnerability that can be exploited by an authenticated remote attacker to write data into the stack. This can lead to a denial-of-service condition, memory overwriting, or remote code execution. The vulnerability is associated with a buffer overflow in memory, which can be exploited to cause a denial-of-service condition or execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.