DeutschShown in its original language — a full translation is planned for a future version.
Hitachi Ops Center: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
view advisory published 2024-08-05
Ein Angreifer kann mehrere Schwachstellen in Hitachi Ops Center ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-4853US | high8.1OT elevated | — | ||
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of p… | ||||
| CVE-2023-2974US | high8.1 | — | ||
A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.http.ssl.protocols is not enforced, and the client can force t… | ||||
| CVE-2023-33546US | medium5.5 | — | ||
Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input,… | ||||
| CVE-2023-32081US | medium6.5 | — | ||
Vert.x STOMP is a vert.x implementation of the STOMP specification that provides a STOMP server and client. From versions 3.1.0 until 3.9.16 and 4.0.0 until 4.4.2, a Vert.x STOMP s… | ||||
| CVE-2023-0482US | medium5.5 | Exploit | ||
In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that… | ||||
| CVE-2023-24815US | medium5.3 | — | ||
Vert.x-Web is a set of building blocks for building web applications in the java programming language. When running vertx web applications that serve files using `StaticHandler` on… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan