CVE-2012-1062

Multiple cross-site scripting XSS vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the 1 period parameter to showHistoryData.do; 2 selectedNetwork, 3 network, or 4 group parameters to showresource.do; 5 header...

CVE-2012-1063

ManageEngine Applications Manager 9.x and 10.x are reported vulnerable to multiple SQL injection flaws. Specifically, remote attackers can exploit the viewId parameter in fault/AlarmView.do or the period parameter in showHistoryData.do to execute arbitrary SQL commands. The NVD entry lists a base...

PT-2012-3051

Multiple cross-site scripting XSS vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the 1 period parameter to showHistoryData.do; 2 selectedNetwork, 3 network, or 4 group parameters to showresource.do; 5 header...

CVE-2012-1062: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the 1 period parameter to showHistoryData.do; 2 selectedNetwork, 3 network, or 4 group parameters to showresource.do; 5 header...

ME Monitoring Manager v9.x; v10.x - Multiple Vulnerabilities

Document Title: =============== ME Monitoring Manager v9.x; v10.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=115 http://www.cnnvd.org.cn/vulnerability/show/cvid/2012020039 ID: CNNVD-201202-039 Release Date: =============...

ManageEngine Applications Manager Authenticated Code Execution

$Id: manageengineappsmngr.rb 12281 2011-04-08 14:06:10Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ManageEngine Applications Manager Authenticated Code Execution

This module logs into the Manage Engine Applications Manager to upload a payload to the file system and a batch script that executes the payload. Module Options msf use exploit/windows/http/manageengine/appsmngr msf undefinedappsmngr show actions ...actions... msf undefinedappsmngr set ACTION msf...

CVE-2010-2388

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors...

CVE-2010-2388: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors...

CVE-2010-0905

CVE-2010-0905 is listed in Oracle’s July 2010 CPU as affecting Oracle Applications Manager in Oracle E-Business Suite 11.5.10.2 and 12.0.4. The risk matrix shows HTTP access with no authentication and a CVSS v2 base score of 4.3 (medium), indicating a remote exploitable vulnerability that is addr...

CVE-2010-0905: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-0913: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidentiality via unknown vectors related to the 1 Oracle Application Object Library APP02 and 2 Oracle Applications Manager APP04...

CVE-2008-7239: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidentiality via unknown vectors related to the 1 Oracle Application Object Library APP02 and 2 Oracle Applications Manager APP04...

CVE-2009-1986

CVE-2009-1986 refers to an unspecified vulnerability in Oracle Applications Manager within Oracle E-Business Suite 11.5.10.2. Connected sources indicate a remote feasibility that affects confidentiality via unknown vectors, with a CVSSv2 base score of 2.6 (LOW) and network exposure. The Oracle Ju...

CVE-2009-1986: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality via unknown vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 and 12.0.4 have unknown impact and attack vectors related to a Advanced Pricing component, aka 1 APP02, 2 APP03, and 3 APP09; b Application Object Library component, aka 4 APP04, 5 APP07, and 6 APP11; c Applications Manager...

CVE-2008-1827

Technical details about CVE-2008-1827 are not publicly provided in the supplied documents. The connected sources do not reveal specific affected versions, root cause, or remediation. Monitor for updates from official advisories.

CVE-2008-1827: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 and 12.0.4 have unknown impact and attack vectors related to a Advanced Pricing component, aka 1 APP02, 2 APP03, and 3 APP09; b Application Object Library component, aka 4 APP04, 5 APP07, and 6 APP11; c Applications Manager...

Cross site scripting

Cross-site scripting XSS vulnerability in Search.do in ManageEngine Applications Manager 8.x allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...