CVE-2017-3572

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce subcomponent: MDEX. Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3572

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce subcomponent: MDEX. Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3451

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Web. Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and 16.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2017-3451

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Web. Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and 16.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP ...

Design/Logic Flaw

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce subcomponent: MDEX. Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3572

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce subcomponent: MDEX. Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3572

CVE-2017-3572 affects Oracle Commerce Guided Search/Oracle Commerce Experience Manager (MDEX subcomponent). Affected versions: 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1, 6.5.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to cause a hang or frequent crash of the aff...

CVE-2017-3572

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce subcomponent: MDEX. Supported versions that are affected are 6.2.2, 6.3.0, 6.4.1.2, 6.5.0, 6.5.1 and 6.5.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3451

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Web. Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and 16.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2017-3451

CVE-2017-3451 affects Oracle Retail Open Commerce Platform Web subcomponent. Affected are Oracle Retail Open Commerce Platform versions 4.0, 5.0, 5.1, 5.3, 6.0, 6.1, 15.0, and 16.0. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to compromise the platform, w...

CVE-2017-3451

Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications subcomponent: Web. Supported versions that are affected are 4.0, 5.0, 5.1, 5.3, 6.0,6.1, 15.0 and 16.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP ...

CVE-2016-6056

IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 2000442...

Cross site scripting

IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 2000442...

CVE-2016-6056

IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 2000442...

CVE-2016-6056

IBM Call Center for Commerce (CCC) 9.3 and 9.4 is vulnerable to cross-site scripting (CVE-2016-6056). The root cause is an XSS flaw in the Web UI that can allow injection of arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected products/versions: C...

CVE-2016-6056

IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 2000442...

IBM Call Center for Commerce Cross-Site Scripting Vulnerability

IBM Call Center for Commerce is a Web-based call center solution. The solution supports providing CSRs Customer Service Representatives with a single point of access to business information as well as comprehensive multi-channel interactions with customers. A cross-site scripting vulnerability...

shop.vitakraft.de XSS vulnerability

Vulnerable URL: https://shop.vitakraft.de/catalogsearch/result/?q="trolotralala Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Chec...

SAP Cloud Commerce Platform HANA System Authentication Vulnerability

The SAP Cloud Commerce Platform HANA system is a real-time data computing platform based on in-memory computing technology. There are multiple vulnerabilities in the SAP Cloud Commerce Platform HANA system, one of the critical vulnerabilities is an authentication vulnerability that can be exploit...

SAP Cloud Commerce Platform HANA System Session Fixation Vulnerability

The SAP Cloud Commerce Platform HANA system is a real-time data computing platform based on in-memory computing technology. The SAP Cloud Commerce Platform HANA system suffers from several vulnerabilities, one of the critical vulnerabilities is a session fixation vulnerability, which allows an...