Frank Lycops

**Name of the Vulnerable Software and Affected Versions** Tanium Client (affected versions not specified) **Description** Tanium Client is subject to a denial of service condition. The vulnerability allows for a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tanium Threat Response (affected versions not specified) **Description** Tanium Threat Response contains an information disclosure issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tanium Appliance (affected versions not specified) **Description** An improper input validation issue exists in Tanium Appliance. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tanium Threat Response (affected versions not specified) **Description** Tanium Threat Response contains an information disclosure issue. The vulnerability allows for the potential exposure of information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tanium Threat Response (affected versions not specified) **Description** Tanium Threat Response contains an information disclosure issue. The vulnerability allows for the potential exposure of information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SolarWinds Platform (affected versions not specified) **Description** The issue is related to a lack of protection for the web page structure in the Search/Node Information Section component of the SolarWinds Platform user interface. This allows a remote attacker to conduct cross-site scripting (XSS) attacks. The vulnerability requires authentication and user interaction. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Palo Alto Networks PAN-OS (affected versions not specified) **Description** A local file deletion issue in the software enables an authenticated administrator to delete files from the local file system with elevated privileges. These files can include logs and system components that impact the integrity and availability of the software. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Beckhoff IPC Diagnostics versions prior to 1.8 **Description** The issue allows remote attackers to cause a denial of service, create arbitrary users, or possibly have other unspecified impacts via a crafted request to the "/upnpisapi" endpoint, specifically by using the "beckhoff.com:service:cxconfig:1#Write" SOAP action. **Recommendations** For versions prior to 1.8, update to version 1.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the /config functions and the /upnpisapi endpoint to minimize the risk of exploitation.