3016 matches found
SUSE CVE-2017-5190
NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information leakage, related to a stale profile...
CVE-2023-23592
WALLIX Access Manager 3.x through 4.0.x allows a remote attacker to access sensitive information...
CVE-2023-23592
WALLIX Access Manager 3.x through 4.0.x allows a remote attacker to access sensitive information...
Information disclosure
WALLIX Access Manager 3.x through 4.0.x allows a remote attacker to access sensitive information...
CVE-2023-23592
WALLIX Access Manager 3.x through 4.0.x allows a remote attacker to access sensitive information...
CVE-2023-23592
The CVE-2023-23592 entry affects WALLIX Access Manager 3.x through 4.0.x and results in an information disclosure vulnerability that could be exploited remotely. The issue is documented across multiple sources: the NVD entry describes a HIGH severity (CVSS v3.1: 7.5) with network attack vector an...
WALLIX Access Manager 安全漏洞
WALLIX Access Manager is an access manager from WALLIX France. It filters external access to critical resources by remote employees or third-party vendors, and is also the ideal command center for centralizing the auditing of all Fortress sessions. A security vulnerability exists in WALLIX Access...
CVE-2023-23592
WALLIX Access Manager 3.x through 4.0.x allows a remote attacker to access sensitive information...
The vulnerability of the Authentication Engine component of the Oracle Access Manager control system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Oracle Access Manager Elevation of Privilege (Jan 2023 CPU)
The version of Oracle Access Manager installed on the remote host is affected by the following vulnerability as noted in the January 2023 CPU advisory: - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. The supported version that is...
CVE-2023-21859
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Access Manager...
CVE-2023-21859
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Access Manager...
Design/Logic Flaw
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Access Manager...
Oracle Fusion Middleware 安全漏洞
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collections, and other capabilities. A security vulnerability exists in Oracle Fusion Middleware Access...
CVE-2023-21859
The CVE-2023-21859 entry concerns Oracle Access Manager (Authentication Engine) in Oracle Fusion Middleware. Affected version: 12.2.1.4.0. Root cause described as insufficient input validation in the Authentication Engine, enabling a high-privilege attacker with logon on the infrastructure to com...
PT-2023-1193 · Oracle · Oracle Access Manager
Name of the Vulnerable Software and Affected Versions: Oracle Access Manager version 12.2.1.4.0 Description: The issue is related to insufficient input validation in the Authentication Engine component of Oracle Access Manager. This allows a high-privileged attacker with logon access to the...
Recog Release v3.0.3
Recog Release v3.0.3, which is available now, includes updated fingerprints for Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus; Atlassian Bitbucket Server; and Supervisord Supervisor. It also includes new fingerprints and a number of bug fixes, all of which are detailed...
Zoho Addresses SQL Injection Vulnerability in ManageEngine Products
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary A security flaw affecting multiple ManageEngine products identified as CVE-2022-47523 is an SQL injection vulnerability found in the ZOHO’s Password Manager Pro Secure Vault, PAM360 Privileged...