CVE-2017-16683: Undefined Security Weakness

Denial of Service DOS in SAP Business Objects Platform, Enterprise 4.10 and 4.20, that could allow an attacker to prevent legitimate users from accessing a service...

SAP Business Objects Financial Consolidation Cross-Site Scripting Vulnerability

SAP Business Objects is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The solution provides reporting, performance management, and data base functionality, and Financial Consolidation is one of the tools used to connect financial systems. A...

Cross site scripting

Cross-Site Scripting XSS exists in SAP Business Objects Financial Consolidation before 2017-06-13, aka SAP Security Note 2422292...

CVE-2017-14516

Cross-Site Scripting XSS exists in SAP Business Objects Financial Consolidation before 2017-06-13, aka SAP Security Note 2422292...

CVE-2017-14516

SAP Business Objects Financial Consolidation is affected by a Cross-Site Scripting (XSS) vulnerability prior to 2017-06-13 (SAP Security Note 2422292). The issue is documented across multiple sources (NVD/CNVD/CVE records) with common description: XSS in the Financial Consolidation component befo...

CVE-2017-14516: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS exists in SAP Business Objects Financial Consolidation before 2017-06-13, aka SAP Security Note 2422292...

PT-2017-13502

Name of the Vulnerable Software and Affected Versions SAP Business Objects Financial Consolidation versions prior to 2017-06-13 Description A Cross-Site Scripting XSS issue exists. This allows for potential malicious script execution. Recommendations For versions prior to 2017-06-13, update to a...

SAP Business Objects Platform Enterprise Denial of Service Vulnerability

SAP Business Objects Platform Enterprise is the enterprise version of a suite of business intelligence software and enterprise performance management platform from SAP, Germany. The program provides reporting, performance management and data base and other functions. A denial of service...

SAP Business Objects Titan XML External Entity Injection Vulnerability

SAP BusinessObjects Germany SAP SAP company developed a provide a variety of business intelligence software, information management software, enterprise performance management solutions, regulatory, risk and compliance solutions. An XML external entity injection vulnerability exists in SAP Busine...

SAP Business Objects DS Open Redirect Vulnerability

SAP Business Objects DS BODS is an ETL tool for data integration, data quality, data analysis, and data processing. SAP Business Objects DS suffers from an open redirection vulnerability that can be exploited by an attacker by constructing a specially designed URI and tricking a user into clickin...

SAP Business Objects DS Open redirect

Application: SAP BO DS Versions Affected: SAP BO DS 4.2 Vendor URL: SAP Bug: Open Redirect Reported: 13.12.2016 Vendor response: 14.12.2016 Date of Public Advisory: 13.06.2017 Reference: SAP Security Note 2472026 Authors: Nursultan Abubakirov ERPScan VULNERABILITY INFORMATION Class: CWE-601 Impac...

[SECURITY] Fedora 23 Update: rubygem-activerecord-4.2.3-3.fc23

Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...

[SECURITY] Fedora 24 Update: rubygem-activerecord-4.2.5.2-2.fc24

Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...

[SECURITY] Fedora 25 Update: rubygem-activerecord-5.0.0.1-1.fc25

Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...

[SECURITY] Fedora 23 Update: rubygem-activerecord-4.2.3-2.fc23

Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...

[SECURITY] Fedora 22 Update: rubygem-activerecord-4.2.0-2.fc22

Implements the ActiveRecord pattern Fowler, PoEAA for ORM. It ties databa se tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL...

The vulnerabilities of SAP Business Objects, SAP Business Objects XI, and SAP Business Objects Edge systems allow attackers to trigger service failures.

The vulnerability of SAP Business Objects, SAP Business Objects XI, and SAP Business Objects Edge systems is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted GIOP package...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2015-06837)

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle. An unspecified vulnerability exists in Oracle E-Business Suite 12.1.3, 12.2.3, 12.2.4. Allows an authenticated remote user to affect confidentiality by vectoring object-related business-BC4J...

CVE-2015-4865

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to Business Objects - BC4J...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via vectors related to Business Objects - BC4J...