Design/Logic Flaw

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Admin Console. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...

Design/Logic Flaw

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...

CVE-2022-39412

The CVE-2022-39412 entry affects Oracle Fusion Middleware’s Oracle Access Manager (Admin Console) with the affected version 12.2.1.4.0 . The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise Oracle Access Manager, potentially exposing or gaining complete...

CVE-2022-39405

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...

PT-2022-24965 · Oracle · Oracle Access Manager

Name of the Vulnerable Software and Affected Versions: Oracle Access Manager version 12.2.1.4.0 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager, resulting in unauthorized access to critical data or complete access to all...

CVE-2022-39405

CVE-2022-39405 affects Oracle Fusion Middleware’s Oracle Access Manager (Authentication Engine) version 12.2.1.3.0. The vulnerability allows an unauthenticated attacker over HTTP to modify accessible Oracle Access Manager data (impact: data integrity). The connection documents confirm the affecte...

PT-2022-24959 · Oracle · Oracle Access Manager

Name of the Vulnerable Software and Affected Versions: Oracle Access Manager version 12.2.1.3.0 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks can result in unauthorized update, insert, or delete acces...

CVE-2022-39405

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...

Oracle Fusion Middleware 安全漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collections, and other capabilities. A security vulnerability exists in Oracle Fusion Middleware version...

CVE-2022-39412

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Admin Console. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...

ManageEngine Access Manager Plus < 4.3 Build 4303 RCE

The remote host is running a version of ManageEngine Access Manager Plus prior to 4.3 Build 4303. It is, therefore, affected by an authenticated remote code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported versi...

Security Bulletin: WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On is vulnerable to Server-Side Request Forgery (CVE-2022-35282)

Summary IBM Security Access Manager for Enterprise Single Sign-On includes IBM WebSphere Application Server. IBM WebSphere Application Server is vulnerable to Server-Side Request Forgery CVE-2022-35282 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

Security Bulletin: WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On is vulnerable to cross-site scripting in the Admin Console (CVE-2022-34336)

Summary IBM Security Access Manager for Enterprise Single Sign-On includes IBM WebSphere Application Server. IBM WebSphere Application Server is vulnerable to cross-site scripting in the Admin Console CVE-2022-34336 Vulnerability Details Refer to the security bulletins listed in the...

The vulnerability of the xmlrpc component in the software solutions for control, management, and auditing of Zoho ManageEngine Password Manager Pro, as well as the software solution for managing privileged sessions in Zoho ManageEngine Access Manager Plus, allows a perpetrator to execute arbitrary code.

The vulnerability of the xmlrpc component in the Zoho ManageEngine Password Manager Pro and Zoho ManageEngine Access Manager Plus software solutions for control, management, and auditing functions is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could all...

Security Bulletin: Tivoli Access Manager for e-business Potential security exposure with IBM WebSphere Application Server APAR PM44303 (CVE-2012-3325)

Abstract If you have installed an interim fix for PM44303, Websphere Application Server Fixpack 21 or Fixpack 23 which includes APAR PM44303, there is the potential for an authenticated user to gain access to unauthorized resources. Content VULNERABILITY DETAILS: DESCRIPTION: The Web Portal Manag...

Security Bulletin: IBM Security Access Manager for Enterprise Single Sign On Cross Site Scripting Vulnerability (CVE-2013-6745)

Abstract A dynamic web form is vulnerable to a cross-site scripting XSS attack Content VULNERABILITY DETAILS: CVE ID: CVE-2013-6745 DESCRIPTION: A dynamic web form is vulnerable to a cross-site scripting XSS attack. A remote attacker could exploit this vulnerability using JavaScript code to injec...

Security Bulletin: IBM Security Access Manager for Enterprise Single Sign On (ISAM ESSO) Sync.exe code injection vulnerability (CVE-2013-0555)

Abstract The sync.exe process of ISAM ESSO is prone to a code injection vulnerability. Content VULNERABILITY DETAILS: DESCRIPTION: The sync.exe process of ISAM ESSO can be exploited by a local system administrative user through the use of code injection to compromise local data. The attack requir...

Security Bulletin: IBM Tivoli Access Manager for e-business (TAMeb) Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool used by TAMeb contains a security vulnerability. The vulnerability allows an attacker to craft a malicious li...

ManageEngine Access Manager Plus < 4.3 Build 4305 SQLi

The remote host is running a version of ManageEngine Access Manager Plus prior to 4.3 Build 4305. It is, therefore, affected by a SQL injection vulnerability. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the...

Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution...