Unify Openscape 4000 Manager vulnerabilities

12 known vulnerabilities in Unify Openscape 4000 Manager from Atos. 12 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command

  CVE-2023-45356Oct 9, 2023AtosEPSS 1.49%

  Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access, via dtb pa

• 8.8 High severity

  Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command

  CVE-2023-45355Oct 9, 2023AtosEPSS 1.49%

  Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access via the

• 8.8 High severity

  Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command

  CVE-2023-45351Oct 9, 2023AtosEPSS 1.49%

  Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039.

• 8.8 High severity

  Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command

  CVE-2023-35035Jun 12, 2023AtosEPSS 1.5%

  Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23557.

• 9.8 Critical severity

  Unify Openscape 4000 Assistant: Improper Control of Generation of Code

  CVE-2023-35034Jun 12, 2023AtosEPSS 1.34%

  Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow remote code execution by unauthenticated users, aka OSFOURK-24033.

• 8.8 High severity

  Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command

  CVE-2023-35033Jun 12, 2023AtosEPSS 1.5%

  Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23556.

• 8.8 High severity

  Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command

  CVE-2023-35032Jun 12, 2023AtosEPSS 1.5%

  Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users, aka OSFOURK-23554.

• 8.8 High severity

  Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command

  CVE-2023-35031Jun 12, 2023AtosEPSS 1.5%

  Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-24036.

• 9.8 Critical severity

  Unify Openscape 4000: Improper Neutralization of Special Elements used in a Command

  CVE-2023-29475Apr 6, 2023Atos

  inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543.

• 9.8 Critical severity

  Unify Openscape 4000: Improper Neutralization of Special Elements used in a Command

  CVE-2023-29474Apr 6, 2023Atos

  inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23552.

• 9.8 Critical severity

  Unify Openscape 4000: Improper Neutralization of Special Elements used in a Command

  CVE-2023-29473Apr 6, 2023Atos

  webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710.

• 9.8 Critical severity

  Unify Openscape 4000 Assistant: Improper Neutralization of Special Elements used in a Command

  CVE-2022-46404Dec 13, 2022AtosEPSS 1.85%

  A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4) that may allow an unauthenticated attacker to upload arbitrary files