CVE-2004-2563

MEDIO 5.8CVE-2004-2563 · Published 31/12/2004 · updated 16/06/2026

In breve

CVE-2004-2563 è una vulnerabilità MEDIO (CVSS 5.8) che riguarda serena teamtrack (serena software).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.2%, superiore al 82.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
serena teamtrack serena_software	`= 6.1.1`	No fix yet

Description

Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and database information, and conduct cross-site scripting (XSS) attacks, via a direct request to tmtrack.dll with modified LoginPage and Template parameters.

References

secunia.com/advisories/12122 · Vendor Advisory
osvdb.org/8182 · Exploit
osvdb.org/8183 · Exploit
osvdb.org/8185 · Exploit
securiteam.com/windowsntfocus/5SP0O0ADGG.html · Exploit
securityfocus.com/bid/10770 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/16771
exchange.xforce.ibmcloud.com/vulnerabilities/16777

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free