Vulnerabilities > Incorrect Resource Transfer Between Spheres

DATE CVE VULNERABILITY TITLE RISK
2019-04-22 CVE-2019-10248 Incorrect Resource Transfer Between Spheres vulnerability in Eclipse Vorto
Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS.
network
high complexity
eclipse CWE-669
8.1
2017-10-17 CVE-2017-14013 Incorrect Resource Transfer Between Spheres vulnerability in Prominent Multiflex M10A Controller Firmware
A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface.
network
high complexity
prominent CWE-669
5.6
2016-09-29 CVE-2016-5062 Incorrect Resource Transfer Between Spheres vulnerability in Aternity 9.0
The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.
network
low complexity
aternity CWE-669
critical
9.8