Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2010-0959

Disclosure Date: March 10, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in WebEditor/Authentication/LoginPage.aspx in IBM ENOVIA SmarTeam 5 allows remote attackers to inject arbitrary web script or HTML via the errMsg parameter.
0
0
Attacker Value
Unknown

CVE-2009-0809

Disclosure Date: March 04, 2009 (last updated October 04, 2023)
The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object.
0
0
Attacker Value
Unknown

CVE-2008-4581

Disclosure Date: October 15, 2008 (last updated October 04, 2023)
The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass intended access restrictions and read Document objects via the Workflow Process (aka Flow Process) view.
0
0