Atos vulnerabilities
We track 16 vulnerabilities in Atos products across 7 products. 16 are rated high or critical, and none are known to be exploited. The most recent was published on December 5, 2023.
Latest Atos vulnerabilities
- 9.8 Critical severity
OpenScape Session Border Controller (SBC): Improper Neutralization of Argument Delimiters in a Command
An argument injection vulnerability has been identified in the administrative web interface of the Atos Unify OpenScape products "Session Border Controller" (SBC) and "Branch", before version V10 R3.4.0, and OpenScape "BCF" before versions V10R10.12.00 and V10
- 8.8 High severity
Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command
Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access, via dtb pa
- 8.8 High severity
Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command
Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access via the
- 8.8 High severity
Unify Openscape Common Management: Unrestricted Upload of File with Dangerous Type
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interface for Authenticated remote upload and
- 8.8 High severity
Unify Openscape Common Management: Improper Limitation of a Pathname to a Restricted Directory
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write acce
- 8.8 High severity
Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039.
- 8.8 High severity
Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23557.
- 9.8 Critical severity
Unify Openscape 4000 Assistant: Improper Control of Generation of Code
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033.
- 8.8 High severity
Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23556.
- 8.8 High severity
Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users, aka OSFOURK-23554.
- 8.8 High severity
Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-24036.
- 7.2 High severity
Unify Openscape Bcf: Improper Neutralization of Special Elements used in a Command
Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands.
- 9.8 Critical severity
Unify Openscape 4000: Improper Neutralization of Special Elements used in a Command
inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543.
- 9.8 Critical severity
Unify Openscape 4000: Improper Neutralization of Special Elements used in a Command
inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23552.
- 9.8 Critical severity
Unify Openscape 4000: Improper Neutralization of Special Elements used in a Command
webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710.
- 9.8 Critical severity
Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4) that may allow an unauthenticated attacker to upload arbitrary files