CVE-2020-13154

Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via a getFileProtectionSettings call to AjaxServlet...

CVE-2020-13154

Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via a getFileProtectionSettings call to AjaxServlet...

CVE-2019-4729

IBM Cognos Analytics versions 11.0 and 11.1 are affected by a vulnerability that allows a remote attacker to obtain sensitive information through detailed error messages returned in the browser, enabling information disclosure. Root cause: leakage via verbose technical error messages. Affected pr...

Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilties

Summary Multiple vulnerabilities in IBM Cognos Analytics have been addressed. A vulnerabiltiy has been addressed in the following 3rd party software component that is consumed by IBM Cognos Analytics: Apache PDFBox. An vulnerability where sensitive information when a detailed technical error...

GitLab EE/CE Parameter Tampering Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Community Editi...

PT-2020-11933 · Citrix · Citrix Adc +1

Name of the Vulnerable Software and Affected Versions: Citrix Gateway versions 11.1 through 12.1 Description: The issue concerns an Inconsistent Interpretation of HTTP Requests. It is noted that Citrix disputes the reported behavior as not a security issue, stating that Citrix ADC only caches...

PT-2020-11932 · Citrix · Citrix Adc +1

Name of the Vulnerable Software and Affected Versions: Citrix Gateway versions 11.1 through 12.1 Description: The issue allows Information Exposure Through Caching. The Via header lists cache protocols and recipients between the start and end points for a request or a response. The Age header...

CVE-2020-4200

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 10.5, 11.1, and 11.5 could allow an authenticated attacker to send specially crafted commands to cause a denial of service. IBM X-Force ID: 174914...

CVE-2020-4200

CVE-2020-4200 affects IBM DB2 for Linux, UNIX and Windows (incl. DB2 Connect Server) on 10.5, 11.1, and 11.5. An authenticated attacker could send specially crafted commands to cause a denial of service. IBM and related bulletins indicate remediation via applying the appropriate DB2 fix pack or s...

CVE-2019-4623

IBM Cognos Analytics 11.0 and 11.1 are vulnerable to cross-site scripting in the Web UI, potentially allowing arbitrary JavaScript and credential disclosure in a trusted session. The issue is documented as CVE-2019-4623 with a MEDIUM impact (CVSS v3.1 base score 5.4). Remediation per IBM’s bullet...

IBM Cognos Analytics Cross-Site Scripting Vulnerability (CNVD-2019-46620)

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. A cross-site scripting...

IBM Cognos Analytics Cross-Site Scripting Vulnerability (NVD-C-2019-212010)

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. A cross-site scripting...

CVE-2019-4231

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 159356...

CVE-2019-4231

CVE-2019-4231 affects IBM Cognos Analytics 11.0 and 11.1. The issue is a Cross-Site Request Forgery (CSRF) that could enable an attacker to perform malicious, unauthorized actions on behalf of a trusted user. The description provided indicates the vulnerability arises from a web application that ...

IBM Cognos Analytics Information Disclosure Vulnerability (CNVD-2019-41415)

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. An information disclosure...

CVE-2019-4645

CVE-2019-4645 affects IBM Cognos Analytics 11.0 and 11.1 with a cross-site scripting (XSS) flaw in the Web UI that could allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted session. IBM’s bulletin notes mitigations via updates: Cognos Analytics 11.1.4 and 11...

Notice of Change Announcement for Version 11.1 of the Citrix Application Delivery Management (ADM)

Citrix Systems, Inc. announces End of Maintenance for version 11.1 of the Citrix Application Delivery Management formerly referred to as NetScaler Management & Analytics System Citrix Application Delivery Management ADM follows a 3-year product lifecycle model. Table 1. Release Milestones and Dat...

Cross site scripting

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 161421...

CVE-2019-4183

IBM Cognos Analytics 11.0 and 11.1 are affected by a denial-of-service issue where remote attackers can send specially crafted requests to exhaust CPU and memory. The shared sources identify the affected products as IBM Cognos Analytics 11.0 and 11.1, but do not detail the root cause in this exce...

PT-2019-16954 · Ibm · Ibm Cognos Analytics

Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics versions 11.0 through 11.1 Description: The issue allows a remote user to send specially crafted requests that could consume all available CPU and memory resources, resulting in a denial of service attack. Recommendations...