Overview 60 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 10 public PoC · 0 EPSS ≥ 0.5
60matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
10public PoC16.7%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
60
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
60
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
10
16.7%
Proof of concept only
2
3.3%
Forecast only
0
0.0%
No public exploit
48
80.0%
split by
peak 12 / year
20082
Not applicable2
High2
not blocked2
Working exploit published2
20090
20103
Not applicable3
High2
Medium1
not blocked3
Working exploit published3
20116
Not applicable6
High1
Medium5
not blocked6
No public exploit6
20124
Not applicable4
High1
Medium2
Low1
not blocked4
Working exploit published2
No public exploit2
20131
Not applicable1
Medium1
not blocked1
No public exploit1
20144
Not applicable4
High1
Medium3
not blocked4
Working exploit published2
No public exploit2
20151
Not applicable1
Medium1
not blocked1
No public exploit1
20163
Not applicable3
High1
Medium2
not blocked3
Working exploit published1
No public exploit2
20178
Not applicable8
High1
Medium7
not blocked8
No public exploit8
20188
Not applicable8
Critical1
High2
Medium5
not blocked8
No public exploit8
20192
Not applicable2
Medium2
not blocked2
No public exploit2
202012
Not applicable12
Critical4
High6
Medium2
not blocked12
No public exploit12
20211
Not applicable1
Critical1
not blocked1
No public exploit1
20220
20232
Not applicable2
High1
Medium1
not blocked2
No public exploit2
20243
Not applicable3
Critical1
Medium2
not blocked3
Proof of concept only2
No public exploit1
200820102012201420162018202020222024
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2024-41614 | Medium | 2024-08-13 | Not applicable | No public exploit | symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for articles. |
| CVE-2024-41613 | Medium | 2024-08-13 | Not applicable | Proof of concept only | A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script or HTML by editing note. |
| CVE-2024-23049 | Critical | 2024-02-05 | Not applicable | Proof of concept only | An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component. |
| CVE-2023-24975 | Medium | 2023-03-10 | Not applicable | No public exploit | IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 247030. |
| CVE-2023-0228 | High | 2023-03-02 | Not applicable | No public exploit | Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2. |
| CVE-2020-25912 | Critical | 2021-10-31 | Not applicable | No public exploit | A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.10 which can lead to an information disclosure or denial of service (DOS). |
| CVE-2020-24683 | Critical | 2020-12-22 | Not applicable | No public exploit | The affected versions of S+ Operations (version 2.1 SP1 and earlier) used an approach for user authentication which relies on validation at the client node (client-side authentication). This is not as secure as having the server validate a client application before allowing a connection. Therefore, if the network communication or endpoints for these applications are not protected, unauthorized actors can bypass authentication and make unauthorized connections to the server application. |
| CVE-2020-24680 | High | 2020-12-22 | Not applicable | No public exploit | In S+ Operations and S+ Historian, the passwords of internal users (not Windows Users) are encrypted but improperly stored in a database. |
| CVE-2020-24679 | Critical | 2020-12-22 | Not applicable | No public exploit | A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages. An attacker might use this flaw to make it crash or even execute arbitrary code on the machine where the service is hosted. |
| CVE-2020-24678 | High | 2020-12-22 | Not applicable | No public exploit | An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations or S+ Historian database is affected by multiple vulnerabilities such as the possibility to allow remote authenticated users to gain high privileges. |
| CVE-2020-24677 | High | 2020-12-22 | Not applicable | No public exploit | Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data. |
| CVE-2020-24676 | High | 2020-12-22 | Not applicable | No public exploit | In Symphony Plus Operations and Symphony Plus Historian, some services can be vulnerable to privilege escalation attacks. An unprivileged (but authenticated) user could execute arbitrary code and result in privilege escalation, depending on the user that the service runs as. |
| CVE-2020-24675 | Critical | 2020-12-22 | Not applicable | No public exploit | In S+ Operations and S+ History, it is possible that an unauthenticated user could inject values to the Operations History server (or standalone S+ History server) and ultimately write values to the controlled process. |
| CVE-2020-24674 | High | 2020-12-22 | Not applicable | No public exploit | In S+ Operations and S+ Historian, not all client commands correctly check user permission as expected. Authenticated but Unauthorized remote users could execute a Denial-of-Service (DoS) attack, execute arbitrary code, or obtain more privilege than intended on the machines. |
| CVE-2020-24673 | Critical | 2020-12-22 | Not applicable | No public exploit | In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database (such as shutdown the DBMS), recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system. This can lead to a loss of confidentiality and data integrity or even affect the product behavior and its availability. |
| CVE-2020-25343 | Medium | 2020-10-07 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via events\event.publish_article.php |
| CVE-2020-17405 | High | 2020-09-01 | Not applicable | No public exploit | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Senstar Symphony 7.3.2.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSOAuth process. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-10980. |
| CVE-2020-15071 | Medium | 2020-08-11 | Not applicable | No public exploit | content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading. |
| CVE-2019-17488 | Medium | 2019-10-10 | Not applicable | No public exploit | b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header. |
| CVE-2018-16249 | Medium | 2019-06-20 | Not applicable | No public exploit | In Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is stored in the "articleTitle" JSON field, and executes a payload when accessing the /member/test/points URI, allowing remote attacks. Any Web script or HTML can be inserted by an admin-authenticated user via a crafted web site name. |
| CVE-2018-1708 | Medium | 2018-10-11 | Not applicable | No public exploit | IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM X-Force ID: 146343. |
| CVE-2018-1706 | Medium | 2018-10-11 | Not applicable | No public exploit | IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 146341. |
| CVE-2018-1704 | Medium | 2018-09-28 | Not applicable | No public exploit | IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 146339. |
| CVE-2018-1702 | High | 2018-09-28 | Not applicable | No public exploit | IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 146189. |
| CVE-2018-1705 | Medium | 2018-08-28 | Not applicable | No public exploit | IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 contain an information disclosure vulnerability that could allow an authenticated attacker to obtain highly sensitive information. IBM X-Force ID: 146340. |
| CVE-2018-1595 | High | 2018-08-01 | Not applicable | No public exploit | IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary commands due to improper handling of user supplied input. IBM X-Force ID: 143622. |
| CVE-2018-12043 | Medium | 2018-06-07 | Not applicable | No public exploit | content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page. |
| CVE-2018-10469 | Critical | 2018-04-27 | Not applicable | No public exploit | b3log Symphony (aka Sym) 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name[] parameter to the /upload URI. |
| CVE-2017-16956 | Medium | 2017-11-27 | Not applicable | No public exploit | b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title. |
| CVE-2017-16881 | Medium | 2017-11-18 | Not applicable | No public exploit | b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/avatar, related to processor/AdminProcessor.java, processor/ArticleProcessor.java, processor/UserProcessor.java, service/ArticleQueryService.java, service/AvatarQueryService.java, and service/CommentQueryService.java. |
| CVE-2017-16821 | Medium | 2017-11-15 | Not applicable | No public exploit | b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For HTTP header that is mishandled during display of a client IP address in /admin/user/userid. |
| CVE-2017-8876 | Medium | 2017-05-10 | Not applicable | No public exploit | Symphony 2 2.6.11 has XSS in the meta[navigation_group] parameter to content/content.blueprintssections.php. |
| CVE-2017-7694 | High | 2017-04-11 | Not applicable | No public exploit | Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute code and get a webshell from the back-end. The attacker must be authenticated and enter PHP code in the datasource editor or event editor. |
| CVE-2017-6067 | Medium | 2017-03-27 | Not applicable | No public exploit | Symphony 2.6.9 has XSS in publish/notes/edit/##/saved/ via the bottom form field. |
| CVE-2017-5542 | Medium | 2017-01-20 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to inject arbitrary web script or HTML via the existing-folder parameter. |
| CVE-2017-5541 | Medium | 2017-01-20 | Not applicable | No public exploit | Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files via a .. (dot dot) in the existing-folder and new-folder parameters. |
| CVE-2016-4309 | High | 2016-06-30 | Not applicable | Working exploit published | Session fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled, allows remote attackers to hijack web sessions via the PHPSESSID parameter. |
| CVE-2015-8766 | Medium | 2016-01-08 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) email_sendmail[from_name], (2) email_sendmail[from_address], (3) email_smtp[from_name], (4) email_smtp[from_address], (5) email_smtp[host], (6) email_smtp[port], (7) jit_image_manipulation[trusted_external_sites], or (8) maintenance_mode[ip_whitelist] parameters to system/preferences. |
| CVE-2015-8376 | Medium | 2016-01-08 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Navigation Group, or (3) Label parameter to blueprints/sections/edit/1. |
| CVE-2015-4661 | Medium | 2015-06-18 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Symphony CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the sort parameter to system/authors. |
| CVE-2013-7346 | Medium | 2014-03-27 | Not applicable | Working exploit published | Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2.3.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the sort parameter to system/authors/, related to CVE-2013-2559. |
| CVE-2013-2559 | Medium | 2014-03-27 | Not applicable | Working exploit published | SQL injection vulnerability in Symphony CMS before 2.3.2 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter to system/authors/. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands. |
| CVE-2013-5400 | High | 2014-02-14 | Not applicable | No public exploit | An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass authentication and obtain "local environment" access via unknown vectors. |
| CVE-2013-6305 | Medium | 2014-01-21 | Not applicable | No public exploit | IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key. |
| CVE-2013-5387 | Medium | 2013-11-06 | Not applicable | No public exploit | Buffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a denial of service (process crash or hang) via a malformed SOAP request with a large amount of request data. |
| CVE-2010-5204 | Medium | 2012-09-06 | Not applicable | No public exploit | Multiple untrusted search path vulnerabilities in IBM Lotus Symphony 1.3.0 20090908.0900 allow local users to gain privileges via a Trojan horse (1) eclipse_1114.dll or (2) emser645mi.dll file in the current working directory, as demonstrated by a directory that contains a .odm, .odt, .otp, .stc, .stw, .sxg, or .sxw file. NOTE: some of these details are obtained from third party information. |
| CVE-2011-4341 | Medium | 2012-02-12 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in symphony/content/content.publish.php in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author permissions to execute arbitrary SQL commands via the filter parameter to (1) symphony/publish/comments or (2) symphony/publish/images. NOTE: this issue can be leveraged to perform cross-site scripting (XSS) attacks via error messages. NOTE: some of these details are obtained from third party information. |
| CVE-2011-4340 | Low | 2012-02-12 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) the profile parameter to extensions/profiledevkit/content/content.profile.php, as demonstrated via requests to (a) the default URI, (b) about/, or (c) drafts/; or (2) the filter parameter in symphony/lib/core/class.symphony.php, as demonstrated via requests to (d) symphony/publish/comments or (e) symphony/publish/images. NOTE: some of these details are obtained from third party information. |
| CVE-2012-0192 | High | 2012-01-23 | Not applicable | No public exploit | Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded (1) JPEG or (2) PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a .doc file. |
| CVE-2011-2893 | Medium | 2011-07-27 | Not applicable | No public exploit | The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .xls spreadsheet with an invalid Value reference. |
| CVE-2011-2888 | Medium | 2011-07-27 | Not applicable | No public exploit | IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex graphics in a presentation. |
| CVE-2011-2887 | Medium | 2011-07-27 | Not applicable | No public exploit | IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service (application crash) via a certain sample document. |
| CVE-2011-2886 | Medium | 2011-07-27 | Not applicable | No public exploit | IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via a .docx document with empty bullet styles for parent bullets. |
| CVE-2011-2885 | Medium | 2011-07-27 | Not applicable | No public exploit | IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via the sample .doc document that incorporates a user-defined toolbar. |
| CVE-2011-2884 | High | 2011-07-27 | Not applicable | No public exploit | Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related to "critical security vulnerability issues." |
| CVE-2010-3458 | High | 2010-09-17 | Not applicable | Working exploit published | SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attackers to execute arbitrary SQL commands via the send-email[recipient] parameter to about/. NOTE: some of these details are obtained from third party information. |
| CVE-2010-3457 | Medium | 2010-09-17 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) fields[website] parameter in the post comments feature in articles/a-primer-to-symphony-2s-default-theme/ or (2) send-email[recipient] parameter to about/. NOTE: some of these details are obtained from third party information. |
| CVE-2010-2143 | High | 2010-06-03 | Not applicable | Working exploit published | Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the mode parameter. |
| CVE-2008-3592 | High | 2008-08-11 | Not applicable | Working exploit published | Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing the uploaded file via a direct request, as demonstrated using workspace/masters/. |
| CVE-2008-3591 | High | 2008-08-11 | Not applicable | Working exploit published | SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the sym_auth cookie in a /publish/filemanager/ request to index.php. |