Matei Badanoiu

A vulnerability exists in the web-based management interface that could allow an authenticated, remote attacker to conduct a stored Cross-Site Scripting (XSS) attack against a user of the interface. The issue is due to insufficient validation of user-supplied input. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. An attacker must have at least a low-privileged account on the affected device to exploit this issue.

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This issue is due to the lack of server-side validation of Administrator permissions. An attacker could exploit this by submitting a crafted HTTP request to an affected system, potentially allowing modification of descriptions of files on a specific page. To exploit this, an attacker would need valid read-only Administrator credentials.

Name of the Vulnerable Software and Affected Versions: PAN-OS (affected versions not specified) Description: An improper input neutralization issue in the management web interface of the Palo Alto Networks PAN-OS software allows a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have network access to the management web interface to exploit this issue. Restricting access to the management web interface to only trusted internal IP addresses can reduce the risk of this issue. This issue does not affect Cloud NGFW and all Prisma Access instances. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the management web interface to only trusted internal IP addresses according to the recommended critical deployment guidelines.

The issue is related to a Server-Side Template Injection affecting the ecommerce plugin, which could lead to possible Remote Code Execution (RCE).

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to bypass the authorization mechanisms for specific file management functions. This is due to a lack of server-side validation of Administrator permissions. An attacker could exploit this vulnerability by submitting a crafted HTTP request to an affected system, potentially allowing them to upload files to restricted locations. The attacker would need valid Read-Only Administrator credentials to exploit this vulnerability.

Name of the Vulnerable Software and Affected Versions: PAN-OS (affected versions not specified) Description: The issue is related to an improper neutralization of matching symbols in the command line interface (CLI) of PAN-OS, which allows authenticated administrators, including those with read-only access, to read arbitrary files on the firewall. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to improper input validation in Apache Superset, allowing an authenticated attacker to create a MariaDB connection with local infile enabled. If both the MariaDB server and the local mysql client on the web server are set to allow for local infile, it's possible for the attacker to execute a specific MySQL/MariaDB SQL command that can read files from the server and insert their content into a MariaDB database table.

The vCenter Server contains multiple local privilege escalation issues due to a misconfiguration of `sudo`. An authenticated local user with non-administrative privileges may be able to exploit these issues to elevate privileges to root on the vCenter Server Appliance. A proof-of-concept exploit has been published and is available online. Approximately 40,000 systems are potentially affected. The root cause of the issue is a misconfiguration in the `/etc/sudoers` file, which allows for the preservation of dangerous environment variables during `sudo` command execution.

Name of the Vulnerable Software and Affected Versions: VMware vCenter Server (affected versions not specified) Description: The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system. A proof-of-concept (PoC) exploit has been released for this vulnerability, potentially allowing authenticated remote code execution. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: vCenter Server (affected versions not specified) Description: The issue is related to insufficient protection of internal data in the vCenter Server, which may allow a remote attacker to disclose sensitive information. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to the exposure of diagnostic information and controls through MBeans, which are also accessible through the authenticated Jolokia endpoint. This includes the Log4J2 MBean, which is not intended for non-administrative users. An authenticated attacker could exploit this to write arbitrary files to the filesystem, potentially leading to remote code execution.

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This issue is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have at least a low-privileged account on an affected device.

A Persistent Cross-site Scripting (XSS) issue can be carried out on certain pages, allowing an attacker to hijack a user's session and perform other attacks.

The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certain rights can successfully perform XML External Entity attacks (XXE) against the backend service.

A Persistent Cross-site Scripting (XSS) issue can be exploited in a certain field of the Unica Platform, allowing an attacker to hijack a user's session and perform other attacks.

A Persistent XSS issue can be exploited in a certain field, allowing an attacker to hijack a user's session and perform other attacks.

The issue allows privilege escalation by a malicious local user due to the JMX management service being provided without authentication by default. Administrators are advised to take mitigation measures.

The issue is related to an Improper Control of Dynamically-Managed Code Resources vulnerability. This vulnerability allows authenticated developers to execute OS commands via a Groovy Sandbox Bypass. It may enable a remote attacker to execute arbitrary code.

The issue allows authenticated developers to execute OS commands via FreeMarker SSTI due to improper control of dynamically-managed code resources.

The Solr plugin of Apache OFBiz is configured to automatically make a RMI request on localhost, port 1099 by default. In affected versions, an attacker may exploit this behavior by hosting a malicious RMI server on localhost to run arbitrary code at server start-up or on a server restart.