Refine your search

3 vulnerabilities found for e-Pares by FUJITSU KYUSHU SYSTEMS

jvndb-2010-000021
Vulnerability from jvndb
Published
2010-06-03 11:29
Modified
2010-06-03 11:29
Severity ?
() - -
Summary
e-Pares vulnerable to cross-site scripting
Details
e-Pares contains a cross-site scripting vulnerability. e-Pares is a system that manages facility (conference rooms, etc.) information. e-Pares contains a cross-site scripting vulnerability. This vulnerability that was reported to IPA and JPCERT/CC was discovered as part of the Web application diagnosis service by Local Authorities Systems Development Center (LASDEC) for the 2008 fiscal year.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000021.html",
  "dc:date": "2010-06-03T11:29+09:00",
  "dcterms:issued": "2010-06-03T11:29+09:00",
  "dcterms:modified": "2010-06-03T11:29+09:00",
  "description": "e-Pares contains a cross-site scripting vulnerability.\r\n\r\ne-Pares is a system that manages facility (conference rooms, etc.) information. e-Pares contains a cross-site scripting vulnerability.\r\n\r\nThis vulnerability that was reported to IPA and JPCERT/CC was discovered as part of the Web application diagnosis service by Local Authorities Systems Development Center (LASDEC) for the 2008 fiscal year.",
  "link": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000021.html",
  "sec:cpe": {
    "#text": "cpe:/a:fujitsu:e-pares",
    "@product": "e-Pares",
    "@vendor": "FUJITSU KYUSHU SYSTEMS",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2010-000021",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN58439007/index.html",
      "@id": "JVN#58439007",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2150",
      "@id": "CVE-2010-2150",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-2150",
      "@id": "CVE-2010-2150",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/40029",
      "@id": "SA40029",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/40515",
      "@id": "40515",
      "@source": "BID"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-79",
      "@title": "Cross-site Scripting(CWE-79)"
    }
  ],
  "title": "e-Pares vulnerable to cross-site scripting"
}

jvndb-2010-000023
Vulnerability from jvndb
Published
2010-06-03 11:29
Modified
2010-06-03 11:29
Severity ?
() - -
Summary
e-Pares vulnerable to session fixation
Details
e-Pares contains a session fixation vulnerability. e-Pares is a system that manages facility (conference rooms, etc.) information. e-Pares contains a session fixation vulnerability. This vulnerability that was reported to IPA and JPCERT/CC was discovered as part of the Web application diagnosis service by Local Authorities Systems Development Center (LASDEC) for the 2008 fiscal year.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000023.html",
  "dc:date": "2010-06-03T11:29+09:00",
  "dcterms:issued": "2010-06-03T11:29+09:00",
  "dcterms:modified": "2010-06-03T11:29+09:00",
  "description": "e-Pares contains a session fixation vulnerability.\r\n\r\ne-Pares is a system that manages facility (conference rooms, etc.) information. e-Pares contains a session fixation vulnerability.\r\n\r\nThis vulnerability that was reported to IPA and JPCERT/CC was discovered as part of the Web application diagnosis service by Local Authorities Systems Development Center (LASDEC) for the 2008 fiscal year.",
  "link": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000023.html",
  "sec:cpe": {
    "#text": "cpe:/a:fujitsu:e-pares",
    "@product": "e-Pares",
    "@vendor": "FUJITSU KYUSHU SYSTEMS",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2010-000023",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN36925871/index.html",
      "@id": "JVN#36925871",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2149",
      "@id": "CVE-2010-2149",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-2149",
      "@id": "CVE-2010-2149",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/40029",
      "@id": "SA40029",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/40513",
      "@id": "40513",
      "@source": "BID"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "e-Pares vulnerable to session fixation"
}

jvndb-2010-000022
Vulnerability from jvndb
Published
2010-06-03 11:29
Modified
2010-06-03 11:29
Severity ?
() - -
Summary
e-Pares vulnerable to cross-site request forgery
Details
e-Pares contains a cross-site request forgery vulnerability. e-Pares is a system that manages facility (conference rooms, etc.) information. e-Pares contains a cross-site request forgery vulnerability. This vulnerability that was reported to IPA and JPCERT/CC was discovered as part of the Web application diagnosis service by Local Authorities Systems Development Center (LASDEC) for the 2008 fiscal year.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000022.html",
  "dc:date": "2010-06-03T11:29+09:00",
  "dcterms:issued": "2010-06-03T11:29+09:00",
  "dcterms:modified": "2010-06-03T11:29+09:00",
  "description": "e-Pares contains a cross-site request forgery vulnerability.\r\n\r\ne-Pares is a system that manages facility (conference rooms, etc.) information. e-Pares contains a cross-site request forgery vulnerability.\r\n\r\nThis vulnerability that was reported to IPA and JPCERT/CC was discovered as part of the Web application diagnosis service by Local Authorities Systems Development Center (LASDEC) for the 2008 fiscal year.",
  "link": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000022.html",
  "sec:cpe": {
    "#text": "cpe:/a:fujitsu:e-pares",
    "@product": "e-Pares",
    "@vendor": "FUJITSU KYUSHU SYSTEMS",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "2.6",
    "@severity": "Low",
    "@type": "Base",
    "@vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2010-000022",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN82465391/index.html",
      "@id": "JVN#82465391",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2151",
      "@id": "CVE-2010-2151",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-2151",
      "@id": "CVE-2010-2151",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/40029",
      "@id": "SA40029",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/40517",
      "@id": "40517",
      "@source": "BID"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-352",
      "@title": "Cross-Site Request Forgery(CWE-352)"
    }
  ],
  "title": "e-Pares vulnerable to cross-site request forgery"
}