CVE-2012-1062

CVE-2012-1062 affects ManageEngine Applications Manager 9.x and 10.x. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script/HTML via several parameters: period (showHistoryData.do), selectedNetwork/network/group (showres...

CVE-2012-1063

ManageEngine Applications Manager 9.x and 10.x are reported vulnerable to multiple SQL injection flaws. Specifically, remote attackers can exploit the viewId parameter in fault/AlarmView.do or the period parameter in showHistoryData.do to execute arbitrary SQL commands. The NVD entry lists a base...

PT-2012-3051

Multiple cross-site scripting XSS vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the 1 period parameter to showHistoryData.do; 2 selectedNetwork, 3 network, or 4 group parameters to showresource.do; 5 header...

PT-2012-3052

Name of the Vulnerable Software and Affected Versions ManageEngine Applications Manager versions 9.x through 10.x Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the viewId parameter to "fault/AlarmView.do" or the period parameter to...

CVE-2012-1063: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the 1 viewId parameter to fault/AlarmView.do or 2 period parameter to showHistoryData.do...

CVE-2012-1062: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the 1 period parameter to showHistoryData.do; 2 selectedNetwork, 3 network, or 4 group parameters to showresource.do; 5 header...

ME Monitoring Manager v9.x; v10.x - Multiple Vulnerabilities

Document Title: =============== ME Monitoring Manager v9.x; v10.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=115 http://www.cnnvd.org.cn/vulnerability/show/cvid/2012020039 ID: CNNVD-201202-039 Release Date: =============...

ManageEngine Applications Manager Authenticated Code Execution

$Id: manageengineappsmngr.rb 12281 2011-04-08 14:06:10Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ManageEngine Applications Manager Authenticated Code Execution

This module logs into the Manage Engine Applications Manager to upload a payload to the file system and a batch script that executes the payload. Module Options msf use exploit/windows/http/manageengine/appsmngr msf undefinedappsmngr show actions ...actions... msf undefinedappsmngr set ACTION msf...

CVE-2010-2388

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors...

CVE-2010-2388: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors...

CVE-2010-0905

CVE-2010-0905 is listed in Oracle’s July 2010 CPU as affecting Oracle Applications Manager in Oracle E-Business Suite 11.5.10.2 and 12.0.4. The risk matrix shows HTTP access with no authentication and a CVSS v2 base score of 4.3 (medium), indicating a remote exploitable vulnerability that is addr...

CVE-2010-0913: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-0905: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attackers to affect integrity via unknown vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidentiality via unknown vectors related to the 1 Oracle Application Object Library APP02 and 2 Oracle Applications Manager APP04...

CVE-2008-7239: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidentiality via unknown vectors related to the 1 Oracle Application Object Library APP02 and 2 Oracle Applications Manager APP04...

CVE-2009-1986

CVE-2009-1986 refers to an unspecified vulnerability in Oracle Applications Manager within Oracle E-Business Suite 11.5.10.2. Connected sources indicate a remote feasibility that affects confidentiality via unknown vectors, with a CVSSv2 base score of 2.6 (LOW) and network exposure. The Oracle Ju...

CVE-2009-1986: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality via unknown vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 and 12.0.4 have unknown impact and attack vectors related to a Advanced Pricing component, aka 1 APP02, 2 APP03, and 3 APP09; b Application Object Library component, aka 4 APP04, 5 APP07, and 6 APP11; c Applications Manager...

CVE-2008-1827

Technical details about CVE-2008-1827 are not publicly provided in the supplied documents. The connected sources do not reveal specific affected versions, root cause, or remediation. Monitor for updates from official advisories.