Imperva SecureSphere 9.0.0.5
Approved changes feed: RSS · Atom
cpe:2.3:a:imperva:securesphere:9.0.0.5:*:*:*:*:*:*:*
part: a version: 9.0.0.5 update: *
| Vendor | Imperva (78f8bc09-6a17-5b54-b43a-e0fd139ca77e) |
|---|---|
| Product | Securesphere (b6bc168b-5921-5a96-9620-b754427cfb3f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-4095 |
vulnerable | 2026-06-08 05:04:33.786867 |
Details available
plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to execute arbitrary commands via a task with a [command].value field in conjunction with an [arguments].value field.
Published: 2013-06-28T23:00:00.000Z
Updated: 2024-09-16T22:55:28.439Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4094 |
vulnerable | 2026-06-08 05:04:33.786605 |
Details available
The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to upload executable files via the (1) private_key or (2) public_key parameter in a T/keyManagement request to plain/settings.html, as demonstrated by uploading a Linux ELF file and a shell script.
Published: 2013-06-28T23:00:00.000Z
Updated: 2024-09-17T02:06:13.851Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4093 |
vulnerable | 2026-06-08 05:04:33.786338 |
Details available
The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to obtain sensitive information via (1) a direct request to dwr/call/plaincall/AsyncOperationsContainer.getOperationState.dwr, which reveals the installation path in the s0.filePath field, or (2) a T/keyManagement request to plain/settings.html, which reveals a temporary path in an error message.
Published: 2013-06-28T23:00:00.000Z
Updated: 2024-09-17T02:42:03.092Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4092 |
vulnerable | 2026-06-08 05:04:33.785917 |
Details available
The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent attackers to obtain sensitive information by leveraging the presence of (1) a session ID in the jsessionid field to secsphLogin.jsp or (2) credentials in the j_password parameter to j_acegi_security_check, and reading (a) web-server access logs, (b) web-server Referer logs, or (c) the browser history.
Published: 2013-06-28T23:00:00.000Z
Updated: 2024-09-17T01:41:45.342Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4091 |
vulnerable | 2026-06-08 05:04:33.785554 |
Details available
The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for the password (aka j_password) field on the secsphLogin.jsp login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Published: 2013-06-28T23:00:00.000Z
Updated: 2024-09-17T04:25:49.140Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.