Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Alcatel-Lucent Component: Omniswitch Firmware Clear all filters
TI-2015-02476 CVE-2015-2805 · GHSA-h4h6-rmf6-5r65

Cross-site request forgery (CSRF) vulnerability in…

Priority LOW 36

Cross-site request forgery (CSRF) vulnerability in sec/content/sec_asa_users_local_db_add.html in the management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, 6855, 6900, 10K, and 6860 with f…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03027 Published 2015-06-16 No fix listed CWE-352
TI-2015-02475 CVE-2015-2804 · GHSA-qmh3-wcgj-6fqq

The management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400…

Priority LOW 24

The management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, and 6855 with firmware before 6.6.4.309.R01 and 6.6.5.x before 6.6.5.80.R02 generates weak session identifiers, which allows remot…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02012 Published 2015-06-16 No fix listed CWE-200