Security Advisory

Best Practices for Security

Best Practices for SecurityGeneral security best practicesThe following list gives you some general best practices fo...
Signing and security for product files

Signing and security for product filesWhich files are signed?SquaredUp uses a DigiCert Extended Validation (EV) Code ...
Signing and security for sensitive tiles

Signing and security for sensitive tilesWhen a tile queries data from external data sources, security measures are ne...
CVE-2021-40091 - SSRF issue

CVE-2021-40091 - SSRF issueCVE:CVE-2021-40091DescriptionAn SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654...
CVE-2021-40092 - Stored cross-site scripting (Image tile)

CVE-2021-40092 - Stored cross-site scripting (Image tile)CVE:CVE-2021-40092DescriptionCross-site scripting (XSS) enab...
CVE-2021-40093 - Stored cross-site scripting (Action Buttons)

CVE-2021-40093 - Stored cross-site scripting (Action Buttons)CVE:CVE-2021-40093DescriptionCross-site scripting (XSS) ...
CVE-2021-40094 - DOM-based stored cross-site scripting

CVE-2021-40094 - DOM-based stored cross-site scriptingCVE:CVE-2021-40094DescriptionCross-site scripting (XSS) enable ...
CVE-2021-40095 - Reading arbitrary files

CVE-2021-40095 - Reading arbitrary filesCVE:CVE-2021-40095DescriptionAn issue was discovered in SquaredUp for SCOM 5....
CVE-2021-40096 - Stored cross-site scripting (provider configuration)

CVE-2021-40096 - Stored cross-site scripting (provider configuration)CVE:CVE-2021-40096DescriptionCross-site scriptin...
Information regarding CVE-2021044228 - Apache Log4j 2

Information regarding CVE-2021044228 - Apache Log4j 2The vulnerability mentioned in CVE-2021-44228 is for Apache Log4...