Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2005-2187

EPSS 0.31% · P54
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2005-2187

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using the (1) fullAccess or (2) fullAccessRight parameter in reports-column-center.jsp, or (3) fullAccess parameter to SystemEvent.jsp.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
McAfee IntruShieldSecurityManagementSystem 获取访问权限漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
McAfee IntruShield Security Management System是McAfee入侵防护设备管理软件。 IntruShield Security Management System存在获取访问权限漏洞。 远程认证的用户可通过将Access选项设置为true来访问"生成报告"功能并修改警报,例如reports-column-center.jsp中fullAccess/fullAccessRight参数,或SystemEvent.jsp的fullAccess参数。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2005-2187

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-2187

Please Login to view more intelligence information

Same Patch Batch · n/a · 2005-07-10 · 75 CVEs total

CVE-2004-2202DUware Software多个溢出漏洞
CVE-2005-2186McAfee IntruShieldSecurityManagementSystem SystemEvent.jsp 跨站脚本攻击漏洞
CVE-2004-2210Express-Web Content Management System未明跨站脚本漏洞
CVE-2004-2209Ideal Science IdealBB多个未明的远程输入验证漏洞
CVE-2004-2208Ideal Science IdealBB多个未明远程输入验证漏洞
CVE-2004-2207Ideal Science IdealBB多个未明远程输入验证漏洞
CVE-2004-2206NatterChat未明SQL注入漏洞
CVE-2004-2205Veritas Cluster Server远程root用户访问漏洞
CVE-2004-2204Macromedia ColdFusion MX CreateObject和Java Extensibility过弱漏洞
CVE-2004-2203Federico David Sacerdoti Ansel不安全默认权限漏洞
CVE-2004-2211AliveSites Forum多个未明远程输入验证漏洞
CVE-2004-2201Duware软件多个远程漏洞
CVE-2004-2200DUware Software多个远程漏洞
CVE-2004-2199Duware软件多个远程漏洞
CVE-2004-2198DUware Software多个远程漏洞
CVE-2004-2197KDocker未明漏洞
CVE-2004-2196Zanfi CMS lite 1.1版本漏洞
CVE-2004-2195Zanfi CMS Lite远程文件包含漏洞
CVE-2004-2194MailEnable多个远程服务拒绝漏洞
CVE-2004-2193CJOverkill多个跨站脚本攻击漏洞

Showing top 20 of 75 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2005-2187

No comments yet


Leave a comment