Ecava IntegraXor Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-2306US | high7.5OT elevated | — | ||
The HMI web server in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive cleartext information by sniffing the network. | ||||
| CVE-2016-2305US | medium6.1 | — | ||
Cross-site scripting (XSS) vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. | ||||
| CVE-2016-2304US | medium4.3 | — | ||
Ecava IntegraXor before 5.0 build 4522 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potent… | ||||
| CVE-2016-2303US | medium5.3 | — | ||
CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cr… | ||||
| CVE-2016-2302US | medium5.3 | — | ||
Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed error messages. | ||||
| CVE-2016-2301US | medium6.3 | — | ||
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. | ||||
| CVE-2016-2300US | medium6.5 | — | ||
Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors. | ||||
| CVE-2016-2299US | high7.3 | — | ||
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-16-105-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-16-105-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan