Opentext Exceed Ondemand
4 CVEs affecting Opentext Exceed Ondemand. Latest disclosed: 2014-05-19. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2013-6994 | | 2014-05-19 | OpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing the netwo… | |
CVE-2013-6807 | | 2014-05-19 | The client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate val… | |
CVE-2013-6806 | | 2014-05-19 | OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted stri… | |
CVE-2013-6805 | | 2014-05-19 | OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffing the net… |