Vulnerabilities

TI-2014-04394 CVE-2014-5392 · GHSA-f8v4-rq66-62m8

XML External Entity (XXE) vulnerability in JobScheduler before 1.6.4246 and 7.x before…

LOW 31

XML External Entity (XXE) vulnerability in JobScheduler before 1.6.4246 and 7.x before 1.7.4241 allows remote attackers to cause a denial of service and read arbitrary files or directories via a request containing an XML…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02486 Published 2014-09-23 No fix listed

TI-2014-04395 CVE-2014-5393 · GHSA-v723-8xx7-26gh

Directory traversal vulnerability in the JobScheduler Operations Center (JOC) in SOS…

LOW 24

Directory traversal vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info permission to read arbitrary fil…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02642 Published 2014-09-11 No fix listed CWE-22

TI-2014-04393 CVE-2014-5391 · GHSA-pg83-2xx5-cjhr

Cross-site scripting (XSS) vulnerability in the JobScheduler Operations Center (JOC) in…

LOW 24

Cross-site scripting (XSS) vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote attackers to inject arbitrary web script or HTML via the ha…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02227 Published 2014-09-11 No fix listed CWE-79

Vulnerabilities

Filters

XML External Entity (XXE) vulnerability in JobScheduler before 1.6.4246 and 7.x before…

Directory traversal vulnerability in the JobScheduler Operations Center (JOC) in SOS…

Cross-site scripting (XSS) vulnerability in the JobScheduler Operations Center (JOC) in…