Vulnerabilities > SOS

DATE CVE VULNERABILITY TITLE RISK
2014-09-23 CVE-2014-5392 XML External Entity Injection vulnerability in JobScheduler
XML External Entity (XXE) vulnerability in JobScheduler before 1.6.4246 and 7.x before 1.7.4241 allows remote attackers to cause a denial of service and read arbitrary files or directories via a request containing an XML external entity declaration in conjunction with an entity reference.
network
sos
5.8
2014-09-11 CVE-2014-5393 Path Traversal vulnerability in SOS Jobscheduler
Directory traversal vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote authenticated users with the info permission to read arbitrary files in the webroot via unspecified vectors.
network
low complexity
sos CWE-22
4.0
2014-09-11 CVE-2014-5391 Cross-Site Scripting vulnerability in SOS Jobscheduler
Cross-site scripting (XSS) vulnerability in the JobScheduler Operations Center (JOC) in SOS JobScheduler before 1.6.4246 and 1.7.x before 1.7.4241 allows remote attackers to inject arbitrary web script or HTML via the hash property (location.hash).
network
sos CWE-79
4.3