CVE-2024-34399

概要

参考情報

• gruppotim.it/it/footer/red-team.html · Third Party Advisory

remedy mid-tier のその他の脆弱性

• CVE-2024-34398中 4.2An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers.
• CVE-2017-17678中 6.1BMC Remedy Mid Tier 9.1SP3 is affected by cross-site scripting (XSS). A DOM-based cross-site scripting vulnerability was discovered in a leg…
• CVE-2017-17677高 8.8BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templa…
• CVE-2017-17675中 5.3BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking. Remote logging can be accessed by unauthenticated users, allowing for an attacker t…
• CVE-2017-17674緊急 9.8BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the syst…