cert@airbus.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS cert@airbus.com
03
assessed vulnerabilities (32)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-113810US | — | — | ||
A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal.
Through the captive portal an attacker can inject an XSS when requesting certificate creation fo… | ||||
| CVE-2026-113808US | — | — | ||
A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal.
Through the captive portal an attacker can inject an XSS when requesting user creation. The stor… | ||||
| CVE-2026-111088US | — | — | ||
A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen. | ||||
| CVE-2026-113469US | — | — | ||
A failure has been identified in the SNS during dynamic data files signature check.
A logic error in the signature verification routine resulting in acceptance of unauthenticate… | ||||
| CVE-2026-113465US | — | — | ||
It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel.
To exploit this vulnerability, an attacker would need to craft… | ||||
| CVE-2026-111090US | — | — | ||
A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers… | ||||
| CVE-2026-88817US | — | — | ||
An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitation or approval.
It… | ||||
| CVE-2026-14466US | — | — | ||
It’s possible to run a stored XSS in Stormshield’s web administration panel.
To exploit this vulnerability, a SNS administrator with appropriate permissions must inject some ma… | ||||
| CVE-2026-8482US | — | — | ||
A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included)
There is a possible leak of secre… | ||||
| CVE-2026-8480US | — | — | ||
A vulnerability was discovered on Stormshield Network Security 4.3.0 to 4.3.41 (included), 4.4.0 to 4.8.15 (included) , 5.0.2 EA to 5.0.5 (included)
A revoked client certificat… | ||||
| CVE-2026-10540US | — | — | ||
The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained… | ||||
| CVE-2026-10539US | — | — | ||
A Control-M/Server communication command does not sufficiently filter or sanitize user-supplied input. Under certain conditions, this issue may allow an unauthenticated attacker to… | ||||
| CVE-2026-10538US | — | — | ||
Messaging consumer functionality allows deserialization of user-controlled data without sufficient restriction of allowed object types in the out of support Control-M/Server and Co… | ||||
| CVE-2026-8474US | — | — | ||
A vulnerability was discovered on Stormshield Network Security
* 4.3.0 to 4.3.41,
* 4.8.0 to 4.8.15,
* 5.0.0 to 5.0.5
It is possible to execute a reflected… | ||||
| CVE-2025-7024US | —OT elevated | — | ||
Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse.
An attacker may execute arbitrary code with SYSTE… | ||||
| CVE-2025-55108US | —OT elevated | — | ||
The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions when mutual SSL/TLS authentication is not… | ||||
| CVE-2025-55118US | — | — | ||
Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured.
The issue occurs in the following cases:
* Control-M/Agent 9.0.2… | ||||
| CVE-2025-55117US | — | — | ||
A stack-based buffer overflow can be remotely triggered when formatting an error message in the Control-M/Agent when SSL/TLS communication is configured.
The issue occurs in the… | ||||
| CVE-2025-55116US | — | — | ||
A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent.
This vulnerability impacts the out-o… | ||||
| CVE-2025-55115US | — | — | ||
A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-… | ||||