Code injection

Vulnerability in the BI Publisher product of Oracle Analytics component: Web Server. Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher. Successful attacks requir...

Buffer overflow

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Pod Admin. Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

Design/Logic Flaw

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Web Dashboards. Supported versions that are affected are 6.4.0.0.0, 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access v...

CVE-2023-22109

CVE-2023-22109 affects Oracle Analytics’ Oracle BI Enterprise Edition (OBIEE) Analytics Web Dashboards. Affected versions are 6.4.0.0.0, 7.0.0.0.0 and 12.2.1.4.0. The vulnerability permits a low-privilege, network-accessible attacker (via HTTP) to cause unauthorized updates, inserts, deletes and ...

CVE-2023-22105

Oracle BI Publisher in Oracle Analytics (Web Server component) is affected by CVE-2023-22105 for versions 6.4.0.0.0 and 7.0.0.0.0. The issue allows a low-privileged, network-access attacker (via HTTP) to compromise BI Publisher, with required user interaction, potentially leading to unauthorized ...

CVE-2023-22082

The CVE-2023-22082 issue affects Oracle BI Enterprise Edition (OAS) Pod Admin in Oracle Analytics for versions 6.4.0.0.0 and 7.0.0.0.0. Root cause: insufficient input validation in Pod Admin, allowing a low-privileged attacker with HTTP network access and user interaction to perform unauthorized ...

Security Bulletin: Vulnerability in pycrypto-2.6.1.tar.gz affects IBM Integrated Analytics System [CVE-2013-7459, CVE-2018-6594]

Summary The pycrypto-2.6.1.tar.gz package is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable vulnerability CVE-2013-7459, CVE-2018-6594. Vulnerability Details CVEID:CVE-2013-7459 DESCRIPTION: PyCrypto is vulnerable to a heap-based buffer...

PT-2023-6382 · Oracle · Oracle Analytics Bi Publisher

Name of the Vulnerable Software and Affected Versions: Oracle Analytics BI Publisher versions 6.4.0.0.0 through 7.0.0.0.0 Description: The issue is related to insufficient input validation in the Web Server component of Oracle BI Publisher. This allows a low-privileged attacker with network acces...

Hitsteps Web Analytics < 5.87 - Arbitrary Settings Update via CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress Plugin Taggbox - UGC Galleries, Social Media Widgets, User Reviews & Analytics Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Taggbox -...

CVE-2023-45268

Cross-Site Request Forgery CSRF vulnerability in Hitsteps Hitsteps Web Analytics plugin = 5.86 versions...

CVE-2023-45268

Cross-Site Request Forgery CSRF vulnerability in Hitsteps Hitsteps Web Analytics plugin = 5.86 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Hitsteps Hitsteps Web Analytics plugin = 5.86 versions...

CVE-2023-45268 WordPress Hitsteps Web Analytics Plugin <= 5.86 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Hitsteps Hitsteps Web Analytics plugin = 5.86 versions...

CVE-2023-45268

CVE-2023-45268 describes a Cross-Site Request Forgery (CSRF) in Hitsteps Web Analytics WordPress plugin (versions

CVE-2023-45268 WordPress Hitsteps Web Analytics Plugin <= 5.86 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Hitsteps Hitsteps Web Analytics plugin = 5.86 versions...

WordPress MonsterInsights - Google Analytics Dashboard Plugin < 8.9.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:monsterinsights:monsterinsights"; ifdescription...

PT-2023-29474 · Unknown · Hitsteps Web Analytics

Name of the Vulnerable Software and Affected Versions: Hitsteps Web Analytics plugin versions = 5.86 Description: A Cross-Site Request Forgery CSRF issue affects the Hitsteps Web Analytics plugin. This type of issue allows an attacker to trick a user into performing unintended actions on a web...

WordPress MonsterInsights - Google Analytics Dashboard Plugin < 8.14.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:monsterinsights:monsterinsights"; ifdescription...

Wordpress Plugin Hitsteps Web Analytics Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...