漏洞描述 Micro Focus Vibe是英国Micro Focus公司的一套团队协作管理解决方案。该方案具有文件共享、构建动态表单和工作流程等功能。 Micro Focus Vibe 4.0.6版本中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
相关漏洞推荐 孚盟云 showFocused SQL注入漏洞 POC sharepoint-lists-api-disclosure: Microsoft SharePoint - List API Disclosure 月子会所ERP管理云平台 /Page/MicroMall/ashx/Handler.ashx 文件上传漏洞 POC sharepoint-layouts-disclosure: Microsoft SharePoint - Layouts Disclosure POC sharepoint-masterpage-disclosure: Microsoft SharePoint - Master Page Disclosure POC sharepoint-site-metadata-disclosure: Microsoft SharePoint - Site Metadata Disclosure POC sharepoint-sitepages-disclosure: Microsoft SharePoint - Site Pages Disclosure POC CVE-2025-49706: Microsoft SharePoint Server - Authentication Bypass (CVE-2025-53770)Microsoft SharePoint Server反序列化漏洞允许远程代码执行 Microsoft Web Deploy 需授权 反序列化漏洞 可导致任意代码执行 POC CVE-2019-0604: Microsoft SharePoint - Remote Code Execution POC CVE-2020-0646: Microsoft .NET Framework - Remote Code Execution POC CVE-2000-0114: Microsoft FrontPage Extensions - Information Disclosure