Skyboxsecurity
10 CVEs across 4 Skyboxsecurity products. Browse Skyboxsecurity vulnerabilities, severities, and proof-of-concept exploits.
Skyboxsecurity products with known CVEs
Skyboxsecurity CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2015-9250 | High | 7.5 | 2018-01-12 | An issue was discovered in Skybox Platform before 7.5.201. Directory Traversal exists in /skyboxview/webskybox/attachmentdownload and /skyboxview/webskybox/fil… |
CVE-2015-9249 | Critical | 9.8 | 2018-01-12 | An issue was discovered in Skybox Platform before 7.5.201. SQL Injection exists in /skyboxview/webservice/services/VersionWebService via a soapenv:Body element. |
CVE-2015-9248 | Medium | 5.4 | 2018-01-12 | An issue was discovered in Skybox Platform before 7.5.201. Stored cross-site scripting vulnerabilities exist in the title, Comments, or Description field to /s… |
CVE-2015-9247 | Medium | 5.4 | 2018-01-12 | An issue was discovered in Skybox Platform before 7.5.401. Reflected cross-site scripting vulnerabilities exist in /skyboxview/webservice/services/VersionRepos… |
CVE-2015-9246 | Critical | 9.8 | 2018-01-12 | An issue was discovered in Skybox Platform before 7.5.201. Remote Unauthenticated Code Execution exists via a WAR archive containing a JSP file. The WAR file i… |
CVE-2017-14773 | High | 7.8 | 2017-10-03 | Skybox Manager Client Application prior to 8.5.501 is prone to an elevation of privileges vulnerability during authentication of a valid user in a debugger-pau… |
CVE-2017-14772 | Low | 3.3 | 2017-10-03 | Skybox Manager Client Application is prone to information disclosure via a username enumeration attack. A local unauthenticated attacker could exploit the flaw… |
CVE-2017-14771 | Medium | 5.5 | 2017-10-03 | Skybox Manager Client Application prior to 8.5.501 is prone to an arbitrary file upload vulnerability due to insufficient input validation of user-supplied fil… |
CVE-2017-14770 | Medium | 5.5 | 2017-10-03 | Skybox Manager Client Application prior to 8.5.501 is prone to an information disclosure vulnerability of user password hashes. A local authenticated attacker… |
CVE-2014-2084 | | | 2014-05-17 | Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly restrict access to the Admin interface, w… |