https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 07:34:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-04380 bdu:2023-04380 https://cve.radiocsirt.org/vuln/bdu:2023-04380 https://cve.radiocsirt.org/vuln/cnvd-2025-24159 cnvd-2025-24159 https://cve.radiocsirt.org/vuln/cnvd-2025-24159 https://cve.radiocsirt.org/vuln/euvd-2026-199958 EUVD-2026-199958 https://cve.radiocsirt.org/vuln/euvd-2026-199958 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2746 <p>The Rockwell Automation Enhanced HIM software contains</p> <p>an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing (CORS) settings and, as a result, is vulnerable to a Cross Site Request Forgery (CSRF) attack. To exploit this vulnerability, a malicious user would have to convince a user to click on an untrusted link through a social engineering attack or successfully perform a Cross Site Scripting Attack (XSS). Exploitation of a CSRF could potentially lead to sensitive information disclosure and full remote access to the affected products.</p> <p>The Rockwell Automation Enhanced HIM software contains</p> <p>an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing (CORS) settings and, as a result, is vulnerable to a Cross Site Request Forgery (CSRF) attack. To exploit this vulnerability, a malicious user would have to convince a user to click on an untrusted link through a social engineering attack or successfully perform a Cross Site Scripting Attack (XSS). Exploitation of a CSRF could potentially lead to sensitive information disclosure and full remote access to the affected products.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-2746 https://cve.radiocsirt.org/vuln/ghsa-3575-hp8p-f32c <p>The Rockwell Automation Enhanced HIM software contains</p> <p>an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing (CORS) settings and, as a result, is vulnerable to a Cross Site Request Forgery (CSRF) attack. To exploit this vulnerability, a malicious user would have to convince a user to click on an untrusted link through a social engineering attack or successfully perform a Cross Site Scripting Attack (XSS). Exploitation of a CSRF could potentially lead to sensitive information disclosure and full remote access to the affected products.</p> <p>The Rockwell Automation Enhanced HIM software contains</p> <p>an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing (CORS) settings and, as a result, is vulnerable to a Cross Site Request Forgery (CSRF) attack. To exploit this vulnerability, a malicious user would have to convince a user to click on an untrusted link through a social engineering attack or successfully perform a Cross Site Scripting Attack (XSS). Exploitation of a CSRF could potentially lead to sensitive information disclosure and full remote access to the affected products.</p> https://cve.radiocsirt.org/vuln/ghsa-3575-hp8p-f32c https://cve.radiocsirt.org/vuln/gsd-2023-2746 gsd-2023-2746 https://cve.radiocsirt.org/vuln/gsd-2023-2746 https://cve.radiocsirt.org/vuln/icsa-23-192-01 <p>The API the application uses is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing (CORS) settings and, as a result, is vulnerable to a Cross Site Request Forgery (CSRF) attack. To exploit this vulnerability, a malicious user would have to convince a user to click on an untrusted link through a social engineering attack or successfully perform a Cross Site Scripting Attack (XSS). Exploitation of a CSRF could potentially lead to sensitive information disclosure and full remote access to the affected products.</p> <p>The API the application uses is not protected sufficiently and uses incorrect Cross-Origin Resource Sharing (CORS) settings and, as a result, is vulnerable to a Cross Site Request Forgery (CSRF) attack. To exploit this vulnerability, a malicious user would have to convince a user to click on an untrusted link through a social engineering attack or successfully perform a Cross Site Scripting Attack (XSS). Exploitation of a CSRF could potentially lead to sensitive information disclosure and full remote access to the affected products.</p> https://cve.radiocsirt.org/vuln/icsa-23-192-01