Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Assyst 10 SP7.5 has authenticated XXE leading to SSRF via XML unmarshalling. The application allows users to send JSON or XML data to the server. It was possible to inject malicious XML data through several access points.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H
Vulnerability Type
N/A
Vulnerability Title
Axios Systems Assyst 代码问题漏洞
Vulnerability Description
Axios Systems Assyst是英国Axios Systems公司的一款现成的应用程序，用于管理 IT 服务，没有与 ServiceNow 和 BMC Remedy 等 ITSM 平台相关的复杂性和开销。 Axios Systems Assyst 10 SP7.5版本存在安全漏洞，该漏洞源于程序允许用户将JSON或XML数据直接发送到服务器。
CVSS Information
N/A
Vulnerability Type
N/A