CVE-2015-4664

Description

References

• packetstormsecurity.com/files/132809/Xceedium-Xsuite-Command-Injection-XSS-Traversal-Escalation.html · Exploit
• modzero.ch/advisories/MZ-15-02-Xceedium-Xsuite.txt · Exploit
• support.ca.com/us/product-content/recommended-reading/security-notices/ca20180614-01--security-notice-for-ca-privileged-access-manager.html · Vendor Advisory
• exploit-db.com/exploits/37708 · Exploit

privileged access manager 的其他漏洞

• CVE-2019-7392严重 9.1An improper authentication vulnerability in CA Privileged Access Manager 3.x Web-UI jk-manager and jk-status allows a remote attacker to gai…
• CVE-2018-9029严重 9.8An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks.
• CVE-2018-9028高危 7.5Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.
• CVE-2018-9026高危 7.5A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafte…
• CVE-2018-9025高危 7.5An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted inp…