Massimiliano Brolli

**Name of the Vulnerable Software and Affected Versions** Microchip Time Provider 4100 versions prior to 2.5.0 **Description** A use of hard-coded credentials issue exists in Microchip Time Provider 4100, potentially allowing for malicious manual software updates. **Recommendations** Update Microchip Time Provider 4100 to version 2.5.0 or later.

**Name of the Vulnerable Software and Affected Versions** Microchip Time Provider 4100 versions prior to 2.5 **Description** An improper neutralization of special elements used in an SQL command ('SQL Injection') issue exists in Microchip Time Provider 4100. This allows for SQL Injection. The vulnerability is present in the web resource. The `SQL` command is not properly sanitized, potentially allowing an attacker to inject malicious code. **Recommendations** Update Microchip Time Provider 4100 to version 2.5 or later.

**Name of the Vulnerable Software and Affected Versions** Microchip Time Provider 4100 versions prior to 2.5 **Description** An improper neutralization of special elements used in an OS command vulnerability exists in Microchip Time Provider 4100, allowing for OS command injection. This issue relates to remote code execution through the backup configuration password. **Recommendations** Update to a version newer than 2.5.

**Name of the Vulnerable Software and Affected Versions** Microchip Time Provider 4100 versions prior to 2.5 **Description** An improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Microchip Time Provider 4100. This allows for OS Command Injection. The issue relates to restoring the configuration password. **Recommendations** Update Microchip Time Provider 4100 to version 2.5 or later.

**Name of the Vulnerable Software and Affected Versions** Microchip Time Provider 4100 versions prior to 2.5 **Description** A flaw exists in Microchip Time Provider 4100 that permits malicious manual software updates due to a missing integrity check during code download. **Recommendations** Update to version 2.5 or later.

**Name of the Vulnerable Software and Affected Versions** Eclipse GlassFish version 7.0.15 **Description** Eclipse GlassFish version 7.0.15 is susceptible to Stored Cross-site scripting attacks within the Administration Console. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Eclipse GlassFish version 7.0.15 **Description** Eclipse GlassFish version 7.0.15 is susceptible to Reflected Cross-site scripting attacks within the Administration Console. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Eclipse GlassFish version 7.0.15 **Description** Eclipse GlassFish version 7.0.15 is susceptible to Stored Cross-site scripting attacks within the Administration Console. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Eclipse GlassFish version 7.0.15 **Description** Eclipse GlassFish version 7.0.15 is susceptible to Stored Cross-site Scripting attacks. The attacks can be performed by modifying the configuration file within the underlying operating system. **Recommendations** Modify the configuration file to prevent the injection of malicious scripts.

**Name of the Vulnerable Software and Affected Versions** Eclipse GlassFish versions 7.0.16 and earlier **Description** Eclipse GlassFish is susceptible to login brute-force attacks due to the absence of restrictions on the number of failed login attempts. **Recommendations** Apply a configuration to limit the number of failed login attempts.

Name of the Vulnerable Software and Affected Versions: Puppet Enterprise versions 2018.1.8 through 2023.8.3 Puppet Enterprise version 2025.3 Description: A user with specific node group editing permissions and a specially crafted `class parameter` could execute commands as root on the primary host. Recommendations: For Puppet Enterprise versions 2018.1.8 through 2023.8.3, update to version 2023.8.4. For Puppet Enterprise version 2025.3, update to version 2025.4.0.

**Name of the Vulnerable Software and Affected Versions** Oracle Database Server versions 19.3 through 19.26 Oracle Database Server versions 21.3 through 21.17 Oracle Database Server versions 23.4 through 23.7 **Description** The issue is related to the XML Database component, allowing a low-privileged attacker with network access via HTTP to compromise the XML Database. Successful attacks require human interaction and can result in unauthorized update, insert, or delete access to some XML Database accessible data, as well as unauthorized read access to a subset of XML Database accessible data. **Recommendations** For versions 19.3 through 19.26, update to a version outside of this range to resolve the issue. For versions 21.3 through 21.17, update to a version outside of this range to resolve the issue. For versions 23.4 through 23.7, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the XML Database component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Payara Server versions 4.1.2.1919.1 through 4.1.2.191.51 Payara Server versions 5.20.0 through 5.68.0 Payara Server versions 6.0.0 through 6.23.0 Payara Server versions 6.2022.1 through 6.2025.2 **Description** The issue affects Payara Server, allowing remote code inclusion due to improper neutralization of input during web page generation, also known as cross-site scripting. **Recommendations** For Payara Server versions 4.1.2.1919.1 through 4.1.2.191.51, update to version 4.1.2.191.51 or later. For Payara Server versions 5.20.0 through 5.68.0, update to version 5.68.0 or later. For Payara Server versions 6.0.0 through 6.23.0, update to version 6.23.0 or later. For Payara Server versions 6.2022.1 through 6.2025.2, update to version 6.2025.2 or later.

Name of the Vulnerable Software and Affected Versions: Italtel S.p.A. i-MCS NFV version 12.1.0-20211215 Description: The issue is a cross-site scripting (XSS) vulnerability that allows unauthenticated remote attackers to inject arbitrary web script or HTML into HTTP/POST parameters. This can be exploited by attackers to execute malicious scripts on the victim's browser. Recommendations: For Italtel S.p.A. i-MCS NFV version 12.1.0-20211215, consider restricting access to HTTP/POST parameters to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using vulnerable parameters in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: BMC Remedy Mid Tier version 7.6.04 Description: The web application in BMC Remedy Mid Tier allows stored HTML Injection by authenticated remote attackers. Recommendations: For BMC Remedy Mid Tier version 7.6.04, consider restricting access to the web application until a patch is available. As a temporary workaround, limit the ability of authenticated remote attackers to inject HTML code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Wildfly (affected versions not specified) **Description** A flaw was found in the Wildfly Elytron integration, where the component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame. This makes it more susceptible to brute force attacks via the Command Line Interface (CLI). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WildFly versions prior to 27.0.1.Final **Description** A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor role is supposed to have only read access permissions and should not be able to suspend the server. The vulnerability is caused by the Suspend and Resume handlers not performing authorization checks to validate whether the current user has the required permissions to proceed with the action. **Recommendations** For versions prior to 27.0.1.Final, update to WildFly Core 27.0.1.Final to resolve the issue. As a temporary workaround, consider restricting access to the Suspend and Resume handlers until a patch is available. Restrict access to the management operations to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Wildfly component versions prior to HAL 3.7.7.Final **Description** A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”. This issue can lead to a cross-site scripting (XSS) vulnerability in the management console. **Recommendations** For versions prior to HAL 3.7.7.Final, update to HAL 3.7.7.Final to resolve the issue. As a temporary workaround, consider restricting access to the management console for users belonging to the “SuperUser”, “Admin”, or “Maintainer” groups until the update is applied.

**Name of the Vulnerable Software and Affected Versions** IBM Workload Scheduler versions 9.5 through 10.2 **Description** The issue is related to the storage of passwords in plain text. This could allow an attacker to disclose protected information. A local user can read the user credentials stored in plain text. **Recommendations** For versions 9.5 through 10.2, update to a version that stores user credentials securely, avoiding plain text storage. As a temporary workaround, consider restricting access to the areas where credentials are stored to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microchip TimeProvider 4100 versions 1.0 and later **Description** The issue is related to a URL Redirection to Untrusted Site ('Open Redirect') vulnerability that allows XSS Through HTTP Headers. This can lead to security issues, as it enables malicious activities through HTTP headers. **Recommendations** For Microchip TimeProvider 4100 versions 1.0 and later, consider disabling the HTTP header processing functionality until a patch is available. Restrict access to the affected system to minimize the risk of exploitation. Avoid using the vulnerable system for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.