CVE-2026-83318

Oracle BI Publisher (part of Oracle Analytics , Administration component) is affected by a network-based vulnerability in supported versions 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with HTTP network access can exploit this, though exploitation is rated as difficult (h...

TIBCO Security Advisory: March 24, 2026 - TIBCO ActiveMatrix BusinessWorks - CVE-2026-3912

TIBCO ActiveMatrix BusinessWorks Injection Vulnerability Original release date: March 24, 2026 Last revised: --- CVE-2026-3912 Source: TIBCO Software Inc. Products Affected TIBCO ActiveMatrix BusinessWorks 6.x TIBCO Enterprise Administrator 2.4.3 Component Affected: Administration Description...

CVE-2025-34332 AudioCodes Fax/IVR Appliance <= 2.6.23 Insecure Service Control Scripts LPE

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component that controls back-end Windows services using helper batch scripts located under C:\F2MAdmin\F2E\AudioCodesfiles\utils\Services. When certain service actions are...

EUVD-2012-1315

Malware in sbrugna...

EUVD-2017-11117

Malware in sbrugna...

EUVD-2020-14276

Malware in sbrugna...

CVE-2021-2049

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Administration. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

Siemens 多款产品 安全漏洞

SIMATIC RTLS Locating Manager is used to configure, operate and maintain the SIMATIC RTLS unit, a real-time wireless positioning system that provides locating solutions. Siemens SIMATIC RTLS Locating Manager suffers from an incorrect assignment of critical resource privileges vulnerability, which...

CVE-2023-40262: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stored Cross-Site Scripting XSS in the administration component via Access Request...

CVE-2017-20111

A vulnerability, which was classified as critical, was found in Teleopti WFM 7.1.0. This affects an unknown part of the component Administration. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

Marketing Administration Component Unauthorized Access

The vulnerability of Oracle Marketing’s Marketing Administration component exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to modify data or gain unauthorized access to the device through HTTP requests...

Oracle BI Publisher Administration Unauthorized Access

The vulnerability of the Administration component of the Oracle BI Publisher software for creating reports is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, to read, modify, add, or delete data...

Unspecified Vulnerability in Oracle BI Publisher (CNVD-2021-04816)

Oracle BI Publisher is a reporting solution that makes it easier and faster than traditional reporting tools to produce, manage and deliver all reports and documents. An unspecified vulnerability exists in the Administration component in Oracle BI Publisher 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0,...

PT-2021-1721

Name of the Vulnerable Software and Affected Versions: Oracle BI Publisher versions 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description: The issue is related to insufficient access control in the Administration component of Oracle BI Publisher, allowing a remote attacker to gain unauthorize...

Oracle E-Business Suite Marketing Encyclopedia System Unauthorized Operation Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. marketing Encyclopedia System is...

PT-2020-2115

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Administration component of the Oracle Marketing Encyclopedia System. It allows an unauthenticated attacker with networ...

CVE-2019-2485

Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite subcomponent: Administration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2019-28440)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Mobile Field Service is one of th...

Unspecified Vulnerability in Oracle GlassFish Server (CNVD-2019-38557)

Oracle Fusion Middleware is a digital business platform for enterprise and cloud computing, and Oracle GlassFish Server is an implementation of the Java Platform Enterprise Edition Java EE 6 specification that provides a flexible, lightweight, production-ready Java EE 6 application server. An...

PT-2018-2251

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server version 3.1.2 Description The issue is related to insufficient access control in the Administration component of Oracle GlassFish Server, allowing a remote attacker to cause a denial of service using the HTTP protocol...