Mwulftange

**Name of the Vulnerable Software and Affected Versions** BMC Track-It! version 20.21.2.109 **Description** This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the authorization of HTTP requests, resulting from the lack of authentication prior to allowing access to functionality. An attacker can leverage this issue to execute code in the context of the service account. **Recommendations** For version 20.21.2.109, consider restricting access to the HTTP module to minimize the risk of exploitation until a patch is available. As a temporary workaround, ensure proper authentication mechanisms are in place prior to allowing access to functionality. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** DevExpress (affected versions not specified) **Description** This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is required to exploit this issue. The flaw exists within the SafeBinaryFormatter library due to the lack of proper validation of user-supplied data, resulting in deserialization of untrusted data. An attacker can leverage this issue to execute code in the context of the service account. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** The issue is related to errors in code generation management. It allows a remote attacker to execute arbitrary code. The vulnerability can be exploited by an attacker acting remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** BMC Track-It! version 20.21.01.102 **Description** This issue allows remote attackers to bypass authentication on affected installations. The flaw exists within the authorization of HTTP requests due to the lack of authentication prior to allowing access to functionality. An attacker can leverage this to bypass authentication on the system. **Recommendations** For version 20.21.01.102, consider restricting access to the HTTP module to minimize the risk of exploitation until a patch is available. As a temporary workaround, review and strengthen the authorization of HTTP requests to ensure proper authentication is required before allowing access to functionality.

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: An issue was discovered in Veritas Enterprise Vault where the application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization behavior that is inherent to the .NET Remoting service. A malicious attacker can exploit both TCP remoting services and local IPC services on the Enterprise Vault Server. Recommendations: For Veritas Enterprise Vault versions through 14.1.2, properly configure the servers and firewall as described in the vendor's security alert for this vulnerability to mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: The issue arises from the deserialization behavior inherent to the .NET Remoting service, which is used by several services started by the Enterprise Vault application on start-up. These services listen on random .NET Remoting TCP ports for possible commands from client applications and can be exploited by a malicious attacker. Both TCP remoting services and local IPC services on the Enterprise Vault Server are vulnerable to exploitation. The vulnerability can be mitigated by properly configuring the servers and firewall as described in the vendor's security alert. Recommendations: For Veritas Enterprise Vault versions through 14.1.2, properly configure the servers and firewall as described in the vendor's security alert to mitigate the vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: The issue is related to the deserialization behavior inherent to the .NET Remoting service. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. A malicious attacker can exploit both TCP remoting services and local IPC services on the Enterprise Vault Server. This can be mitigated by properly configuring the servers and firewall as described in the vendor's security alert. Recommendations: For versions through 14.1.2, properly configure the servers and firewall as described in the vendor's security alert to mitigate the issue. As a temporary workaround, consider restricting access to the TCP remoting services and local IPC services on the Enterprise Vault Server until a patch is available.

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: The issue is related to the deserialization behavior inherent to the .NET Remoting service. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. A malicious attacker can exploit both TCP remoting services and local IPC services on the Enterprise Vault Server. This can be mitigated by properly configuring the servers and firewall as described in the vendor's security alert. Recommendations: For versions through 14.1.2, properly configure the servers and firewall as described in the vendor's security alert to mitigate the issue. As a temporary workaround, consider restricting access to the TCP remoting services and local IPC services on the Enterprise Vault Server until a patch is available.

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: An issue was discovered in Veritas Enterprise Vault where the application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization behavior that is inherent to the .NET Remoting service. A malicious attacker can exploit both TCP remoting services and local IPC services on the Enterprise Vault Server. Recommendations: For Veritas Enterprise Vault versions through 14.1.2, properly configure the servers and firewall as described in the vendor's security alert for this vulnerability to mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DevExpress.XtraReports.UI versions prior to v21.1 **Description** The issue allows attackers to execute arbitrary code via insecure deserialization. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** For versions prior to v21.1, update to a version that includes a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SharePoint (affected versions not specified) **Description** The issue is related to insufficient protection of internal data in Microsoft SharePoint, which can be exploited to gain unauthorized access to protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Foundation (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified) Description: An information disclosure issue exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. This could allow an attacker to view the folder path of scripts loaded on the page. To exploit this issue, an attacker would require access to the specific SharePoint page affected. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. Recommendations: For Microsoft SharePoint Server, update the software to correct how scripts are referenced on some SharePoint pages. For Microsoft SharePoint Foundation, update the software to correct how scripts are referenced on some SharePoint pages. For Microsoft SharePoint Enterprise Server, update the software to correct how scripts are referenced on some SharePoint pages. As a temporary workaround, consider restricting access to the affected SharePoint pages until a patch is available.

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Foundation (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified) Description: A remote code execution issue exists in Microsoft SharePoint due to improper protection of APIs from unsafe data input. This could allow a remote attacker to execute arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. Exploitation requires accessing a susceptible API on an affected version of SharePoint with specially-formatted input. Recommendations: For Microsoft SharePoint Server, update the software to a version that correctly handles deserialization of untrusted data. For Microsoft SharePoint Foundation, update the software to a version that correctly handles deserialization of untrusted data. For Microsoft SharePoint Enterprise Server, update the software to a version that correctly handles deserialization of untrusted data.

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint (affected versions not specified) Description: A remote code execution issue exists in Microsoft SharePoint due to the software's failure to properly check the source markup of an application package. This could allow an attacker to run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. Exploitation requires a user to upload a specially crafted SharePoint application package to an affected version of SharePoint. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified) Microsoft SharePoint Foundation (affected versions not specified) **Description** A remote code execution issue exists due to insufficient input validation in Microsoft SharePoint. This could allow a remote attacker to execute arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. The issue arises because APIs are not properly protected from unsafe data input. **Recommendations** For Microsoft SharePoint Server, update to a version that includes the fix for this issue. For Microsoft SharePoint Enterprise Server, update to a version that includes the fix for this issue. For Microsoft SharePoint Foundation, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to APIs that handle external data input until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified) Microsoft SharePoint Foundation (affected versions not specified) **Description** A remote code execution issue exists due to insufficient input validation in Microsoft SharePoint. This could allow a remote attacker to execute arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. The issue arises because APIs are not properly protected from unsafe data input. **Recommendations** For Microsoft SharePoint Server, update to a version that includes the fix for this issue. For Microsoft SharePoint Enterprise Server, update to a version that includes the fix for this issue. For Microsoft SharePoint Foundation, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to APIs that are not properly protected from unsafe data input until a patch is available.

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: The issue is related to the deserialization behavior inherent to the .NET Remoting service in Veritas Enterprise Vault. On start-up, the application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. A malicious attacker can exploit both TCP remoting services and local IPC services on the Enterprise Vault Server. This can be mitigated by properly configuring the servers and firewall as described in the vendor's security alert. Recommendations: For versions through 14.1.2, properly configure the servers and firewall as described in the vendor's security alert for this vulnerability to mitigate the issue. As a temporary workaround, consider restricting access to the TCP remoting services and local IPC services on the Enterprise Vault Server until a patch is available.