CWE-942.

IBM UrbanCode Velocity cross-origin resource sharing

• IBM UrbanCode Velocity
• IBM DevOps Velocity
• CWE-942

GHSL-2024-092: Open CORS policy in home-gallery

• xemle home-gallery
• CWE-942

PlexRipper allows API leak due to open CORS policy

• PlexRipper
• CWE-942

IBM Security ReaQta information disclosure

• IBM Security ReaQta
• CWE-942

Insecure Configuration in Gliffy Online

• Gliffy Online
• CWE-942

memos CORS Misconfiguration in server.go (GHSL-2024-034) in github.com/usememos/memos

• CWE-942

<0.21.0 · fixed in 0.21.0

Casdoor CORS misconfiguration (GHSL-2024-035) in github.com/casdoor/casdoor

• CWE-942

* · no fixed version yet

Arbitrary cross-domain file inclusion in HyperView Geoportal Toolkit

• HyperView Geoportal Toolkit
• CWE-942

exacqVision CORS

• Johnson Controls exacqVision
• CWE-942

SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability.

• Dell Secure Connect Gateway (SCG) Policy Manager
• CWE-942

HCL DRYiCE Lucy v9 (now AEX) is affected by a Cross Origin Resource Sharing (CORS) Vulnerability

• HCL Software DRYiCE Lucy
• CWE-942

Softing edgeAggregator Permissive Cross-domain Policy with Untrusted Domains Remote Code Execution Vulnerability

• Softing edgeAggregator
• CWE-942

Inductive Automation Ignition OPC UA Quick Client Permissive Cross-domain Policy Remote Code Execution Vulnerability

• Inductive Automation Ignition
• CWE-942

vantage6's CORS settings overly permissive

• Broken access control
• CWE-942

<4.3.0 · fixed in 4.3.0

Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials

• CWE-346
• CWE-942

<2.52.1 · fixed in 2.52.1

Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains

• Westermo Lynx
• CWE-942

IBM PowerSC cross-resource origin sharing

• IBM PowerSC
• CWE-942

Microsoft Edge for Android Information Disclosure Vulnerability

• Microsoft Edge (Chromium-based)
• CWE-942

Siemens Opcenter Execution Foundation: A vulnerability has been identified in Opcenter Execution Foundation (All versions <…

• Siemens Opcenter Execution Foundation
• Siemens Opcenter Quality
• CWE-942

Fortinet FortiDDoS-F: A permissive cross-domain policy with untrusted domains vulnerability in Fortinet…

• Fortinet FortiDDoS-F
• Fortinet FortiADC
• CWE-942

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1).

• Siemens SIMATIC PCS neo
• CWE-942

Sentry CORS misconfiguration

• Broken access control
• CWE-697

>=23.6.0, <23.6.2 · fixed in 23.6.2

Sensitive information disclosure due to CORS misconfiguration.

• Acronis Cyber Infrastructure
• CWE-942

Media CP Media Control Panel – Information Disclosure

• Media CP Media Control Panel
• CWE-942

Dell SupportAssist for Home PCs (version 3.11.2 and prior) contain Overly Permissive Cross-domain Whitelist vulnerability.

• Dell SupportAssist Client Consumer
• CWE-942

Connectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS).

• CWE-942

Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).

• CWE-942

Mozilla Thunderbird: A malicious website could have learned the size of a cross-origin resource that supported…

• Mozilla Thunderbird
• Mozilla Firefox
• CWE-942

HCL OneTest Server is vulnerable to Cross Origin Resource Sharing: Arbitrary Origin Trusted

• HCL Software HCL OneTest Server
• CWE-942

Insecure default value for CORS configuration

• CWE-942

<9.7.0 · fixed in 9.7.0

Remote code execution in Eclipse Theia

• Information disclosure
• CWE-346

>=0.3.9, <1.9.0 · fixed in 1.9.0

[UNKNOWN] syndesis: It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to…

• [UNKNOWN] syndesis
• CWE-942