Vulnerabilities fixed in Oracle Financial Services Applications

Oracle has fixed vulnerabilities in several Financial Services applications. A malicious party could exploit the vulnerabilities to execute attacks that could result in the following categories of damage: Denial-of-Service DoS Manipulation of data Circumvention of security measure Accessing...

CVE-2023-22525

Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

CVE-2023-22514

This High severity RCE Remote Code Execution vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.8, and a CVSS Vector of: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H which allows an...

CVE-2023-22520

Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

CVE-2023-22507

Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

CVE-2023-22510

Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

CVE-2023-22502

Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

Design/Logic Flaw

Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

Design/Logic Flaw

Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

Design/Logic Flaw

Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

Design/Logic Flaw

Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

Design/Logic Flaw

Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

Design/Logic Flaw

Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

Case Study: The Cookie Privacy Monster in Big Global Retail

Explore how an advanced exposure management solution saved a major retail industry client from ending up on the naughty step due to a misconfiguration in its cookie management policy. This wasn't anything malicious, but with modern web environments being so complex, mistakes can happen, and...

PT-2024-11966 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules. No further details are provided about the nature of the issu...

What Is Cloud Data Protection?

A Deep Dive into the Cosmic Universe of Information Safeguarding: An Exhaustive Examination of Distributed Data Security As the virtual dominions continue to propagate at a phenomenal pace, the totality of data we generate daily scales new zeniths. We see ourselves increasingly relying on 'online...

GHSA-RWF9-8FQR-P44M Qualys Jenkins Plugin for Policy Compliance Cross-site Scripting vulnerability

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure o...

Qualys Jenkins Plugin for Policy Compliance Cross-site Scripting vulnerability

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access and access to configure o...

GHSA-8525-52VG-JV6V Qualys Jenkins Plugin for Policy Compliance XML External Entity vulnerability

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...

Qualys Jenkins Plugin for Policy Compliance XML External Entity vulnerability

Qualys Jenkins Plugin for Policy Compliance prior to version and including 1.0.5 was identified to be affected by a security flaw, which was missing a permission check while performing a connectivity check to Qualys Cloud Services. This allowed any user with login access to configure or edit jobs...