318 matches found
CVE-2024-24739
SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...
Design/Logic Flaw
SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...
CVE-2024-24739 Missing authorization check in SAP BAM (Bank Account Management)
SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...
SAP Bank Account Management Security Vulnerability
SAP Bank Account Management is a bank account management system from SAP, Germany. A security vulnerability exists in SAP Bank Account Management BAM that originates from allowing authenticated users with restricted access to use functionality, which could result in an escalation of privileges...
PT-2024-3900 · Sap · Sap Bank Account Management
Name of the Vulnerable Software and Affected Versions: SAP Bank Account Management BAM affected versions not specified Description: The issue is related to the lack of an authorization procedure in SAP Bank Account Management BAM, which can allow a remote attacker to escalate their privileges. Th...
OESA-2023-1851 shadow security update
Tools for managing accounts and shadow password files. Security Fixes: shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory treesCVE-2013-4235...
OESA-2023-1850 shadow security update
Tools for managing accounts and shadow password files. Security Fixes: shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory treesCVE-2013-4235...
OESA-2023-1828 shadow security update
This package includes the necessary programs for converting plain password files to the shadow password format and to manage user and group accounts Security Fixes: shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory treesCVE-2013-4235...
PT-2023-24025 · Nxlog · Nxlog Manager
Name of the Vulnerable Software and Affected Versions: NXLog Manager version 5.6.5633 Description: A Cross-Site Request Forgery CSRF issue allows an attacker to manipulate and delete user accounts within the platform by sending a specifically crafted query to the server. This is due to the lack o...
authorized Admin Account Takeover
Description The icms2 contains a flaw in its admin account management functionality, specifically in the process of changing and resetting passwords for administrators. Through careful analysis and testing, it was observed that an authenticated administrator has the capability to change the...
Workspace error "Unable to add account with the given server URL"
Afterentering Citrix Gateway URL on Workspace and thenenteringthecredentials, the user encounters the following error: "Unable to add account with the given server URL. Ensure that it is correct or enter your email address"...
The vulnerability of the OBVAM Trn Journal Domain sub-component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.
The vulnerability of the OBVAM Trn Journal Domain component of the Oracle Banking Virtual Account Management banking analytics system’s simulation model relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access...
The vulnerability of the SMS Module component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to gain access to read, modify, add, or delete data.
The vulnerability of the SMS Module component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, is related to insufficient validation of entered data. Exploiting this vulnerability could allow an...
The vulnerability of the Routing Hub sub-component of the Oracle Banking Virtual Account Management component in the banking analytics system of the Oracle Financial Services Applications allows a perpetrator to gain access to read, modify, add, or delete data.
The vulnerability of the Routing Hub subcomponent of the Oracle Banking Virtual Account Management component in the banking analytics system of the Oracle Financial Services Applications is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the OBVAM Trn Journal Domain sub-component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.
The vulnerability of the OBVAM Trn Journal Domain component of the Oracle Banking Virtual Account Management banking analytics system’s simulation model relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access...
The vulnerability of the OBVAM Trn Journal Domain sub-component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.
The vulnerability of the OBVAM Trn Journal Domain component of the Oracle Banking Virtual Account Management banking analytics system’s simulation model relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access...
CVE-2023-21904
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: OBVAM Trn Journal Domain. Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network acces...
CVE-2023-21905
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: Routing Hub. Supported versions that are affected are 14.5, 14.6 and 14.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
CVE-2023-21907
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: OBVAM Trn Journal Domain. Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network acces...
CVE-2023-21904
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications component: OBVAM Trn Journal Domain. Supported versions that are affected are 14.5, 14.6 and 14.7. Difficult to exploit vulnerability allows high privileged attacker with network acces...