506 matches found
Avaya Aura Communication Manager Elevation of Privilege Vulnerability
Avaya Aura Communication Manager is an open and extensible IP telephony platform from Avaya, Inc. with built-in conferencing and contact center applications and support for a wide range of servers, gateways, and other IP-based communications devices. The platform has built-in conferencing and...
Design/Logic Flaw
A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version prior to 7.1.3.1...
Cross site scripting
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a Cross-site Scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...
CVE-2018-5005
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a Cross-site Scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...
CVE-2018-5005
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a Cross-site Scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...
EMC RSA Archer 6.1.x, 6.2.x, 6.3.x < 6.3.0.7 and 6.4.x < 6.4.0.1 SQL Injection Vulnerability
The version of EMC RSA Archer running on the remote web server is 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 or 6.4.x prior to 6.4.0.1. It is, therefore, affected by SQL Injection Vulnerability. See advisory for details. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11221...
Input validation
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have an input validation bypass vulnerability. Successful exploitation could lead to unauthorized information modification...
CVE-2018-12806
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...
CVE-2018-11065
The WorkPoint component, which is embedded in all RSA Archer, versions 6.1.x, 6.2.x, 6.3.x prior to 6.3.0.7 and 6.4.x prior to 6.4.0.1, contains a SQL injection vulnerability. A malicious user could potentially exploit this vulnerability to execute SQL commands on the back-end database to read...
Adobe Experience Manager server-side request forgery vulnerability (CNVD-2018-14949)
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
CVE-2018-14775
CVE-2018-14775 affects OpenBSD 6.2 and 6.3, where the function tss_alloc in sys/arch/i386/i386/gdt.c mishandles I/O port access control on the i386 architecture. This leads to a Local Denial of Service (system crash). The impact is local, with no information about remote exploitation provided. Pa...
Server side request forgery (ssrf)
Adobe Experience Manager versions 6.2 and 6.3 have a Server-Side Request Forgery vulnerability. Successful exploitation could lead to sensitive information disclosure...
CVE-2018-3036
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network...
CVE-2013-2972
Summary (CVE-2013-2972): IBM WebSphere Cast Iron 6.3 (Virtual and Physical appliances) has a vulnerability that could allow remote attackers to bypass intended access restrictions via unspecified vectors. The issue is documented in IBM’s security bulletin for Cast Iron, which cites a CVSS v2 base...
Security Bulletin: A security vulnerability has been identified in Tivoli Integrated Portal shipped with IBM Tivoli Storage Manager FastBack for Workstations (CVE-2017-1121)
Summary Inside the Tivoli Integrated Portal there is a potential cross-site scripting vulnerability in the Admin Console of WebSphere Application Server in the underlying eWAS Vulnerability Details Please consult the Security Bulletin: Potential Cross-site scripting vulnerability in WebSphere...
Security Bulletin: A security vulnerability has been identified in IBM Websphere Application Server shipped with IBM Security Directory Server (CVE-2017-1731)
Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Security Directory Server ISDS. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin...
Security Bulletin: A security vulnerability has been identified in IBM Websphere Application Server shipped with IBM Security Directory Server (CVE-2017-1741)
Summary IBM WebSphere Application Server WAS is shipped as a component of IBM Security Directory Server ISDS. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin...
Security Bulletin: TLS padding vulnerability affects IBM Tivoli/Security Directory Server (CVE-2014-8730)
Summary IBM Tivoli/Security Directory Server ITDS/ISDS are affected by a TLS padding vulnerability, which could allow a remote attacker to obtain sensitive information. Vulnerability Details The following vulnerability affects IBM Security Directory Server / IBM Tivoli Directory Server CVEID:...
Security Bulletin: Cross Site Scripting vulnerability in IBM Directory Server (CVE-2014-6100)
Summary The Directory Server Admin UI is vulnerable to cross site scripting which allows remote execution of scripts due to insufficient input validation of URL parameters. Vulnerability Details CVE-ID: CVE-2014-6100 IBM Security Directory Server is vulnerable to cross-site scripting, caused by...
Security Bulletin:Vulnerability in RC4 stream cipher affects IBM WebSphere Cast Iron Solution (CVE-2015-2808)
Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM WebSphere Cast Iron SolutionCVE-2015-2808 Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacke...