Ecava IntegraXor Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2016-2306US | high7.5OT erhöht | — | ||
The HMI web server in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive cleartext information by sniffing the network. | ||||
| CVE-2016-2305US | medium6.1 | — | ||
Cross-site scripting (XSS) vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. | ||||
| CVE-2016-2304US | medium4.3 | — | ||
Ecava IntegraXor before 5.0 build 4522 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potent… | ||||
| CVE-2016-2303US | medium5.3 | — | ||
CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cr… | ||||
| CVE-2016-2302US | medium5.3 | — | ||
Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed error messages. | ||||
| CVE-2016-2301US | medium6.3 | — | ||
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. | ||||
| CVE-2016-2300US | medium6.5 | — | ||
Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unknown vectors. | ||||
| CVE-2016-2299US | high7.3 | — | ||
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-16-105-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-16-105-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (8)
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
- MitigationIntegraXor
Ecava recommends downloading the latest build to address the identified vulnerabilities.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan