Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the user views a malicious page while logged in.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
InterSafe WebFilter
Vendor
Alps System Integration Co., Ltd.
Product
InterSafe WebFilter
Platforms
Unknown
Default status
Unknown
InterSafe WebFilter · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to V9.1SP4 Build1653
affected
Unavailable
Unavailable
Unavailable
None listed
InterSafe LogDirector
Vendor
Alps System Integration Co., Ltd.
Product
InterSafe LogDirector
Platforms
Unknown
Default status
Unknown
InterSafe LogDirector · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions before the replacement file released on 2024 September 9
affected
Unavailable
Unavailable
Unavailable
None listed
InterSafe GatewayConnection
Vendor
Alps System Integration Co., Ltd.
Product
InterSafe GatewayConnection
Platforms
Unknown
Default status
Unknown
InterSafe GatewayConnection · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions before 2024 July 20 maintenance
affected
Unavailable
Unavailable
Unavailable
None listed
InterSafe LogNavigator
Vendor
Alps System Integration Co., Ltd.
Product
InterSafe LogNavigator
Platforms
Unknown
Default status
Unknown
InterSafe LogNavigator · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
prior to Ver.1.1.1
affected
Unavailable
Unavailable
Unavailable
None listed
InterSafe CATS
Vendor
Alps System Integration Co., Ltd.
Product
InterSafe CATS
Platforms
Unknown
Default status
Unknown
InterSafe CATS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions before 2024 July 4 maintenance
affected
Unavailable
Unavailable
Unavailable
None listed
InterSafe MobileSecurity
Vendor
Alps System Integration Co., Ltd.
Product
InterSafe MobileSecurity
Platforms
Unknown
Default status
Unknown
InterSafe MobileSecurity · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions before 2024 August 31 maintenance
affected
Unavailable
Unavailable
Unavailable
None listed
InterScan WebManager
Vendor
Trend Micro Incorporated
Product
InterScan WebManager
Platforms
Unknown
Default status
Unknown
InterScan WebManager · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
9.0
affected
Unavailable
Unavailable
Unavailable
None listed
9.0 Service Pack 1
affected
Unavailable
Unavailable
Unavailable
None listed
9.1
affected
Unavailable
Unavailable
Unavailable
None listed
9.1 Service Pack 1
affected
Unavailable
Unavailable
Unavailable
None listed
9.1 Service Pack 2
affected
Unavailable
Unavailable
Unavailable
None listed
9.1 Service Pack 3
affected
Unavailable
Unavailable
Unavailable
None listed
and 9.1 Service Pack 4
affected
Unavailable
Unavailable
Unavailable
None listed
MJS WebFiltering
Vendor
MIROKU JYOHO SERVICE CO., LTD.
Product
MJS WebFiltering
Platforms
Unknown
Default status
Unknown
MJS WebFiltering · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions before 2024 July 4 maintenance
affected
Unavailable
Unavailable
Unavailable
None listed
AssetView F
Vendor
Hammock Corporation
Product
AssetView F
Platforms
Unknown
Default status
Unknown
AssetView F · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions before 2024 July 4 maintenance
affected
Unavailable
Unavailable
Unavailable
None listed
LANSCOPE EndpointManager WebFiltering
Vendor
MOTEX Inc.
Product
LANSCOPE EndpointManager WebFiltering
Platforms
Unknown
Default status
Unknown
LANSCOPE EndpointManager WebFiltering · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions before 2024 July 4 maintenance
affected
Unavailable
Unavailable
Unavailable
None listed
SPPM BizBrowser
Vendor
AXSEED,Inc.
Product
SPPM BizBrowser
Platforms
Unknown
Default status
Unknown
SPPM BizBrowser · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions before 2024 June 18 maintenance
affected
Unavailable
Unavailable
Unavailable
None listed
SPPM Secure Filtering
Vendor
AXSEED,Inc.
Product
SPPM Secure Filtering
Platforms
Unknown
Default status
Unknown
SPPM Secure Filtering · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions before 2024 July 20 maintenance
affected
Unavailable
Unavailable
Unavailable
None listed
URL Filtering
Vendor
QualitySoft Corporation
Product
URL Filtering
Platforms
Unknown
Default status
Unknown
URL Filtering · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
versions before 2024 July 4 maintenance
affected
Unavailable
Unavailable
Unavailable
None listed
KAITO SecureBrowser
Vendor
JMA Systems Corporation
Product
KAITO SecureBrowser
Platforms
Unknown
Default status
Unknown
KAITO SecureBrowser · Scoped product and version facts