521 matches found
CVE-2020-26944
An issue was discovered in Aptean Product Configurator 4.61.0000 on Windows. A Time based SQL injection affects the nameTxt parameter on the main login page aka cse?cmd=LOGIN. This can be exploited directly, and remotely...
Sql injection
An issue was discovered in Aptean Product Configurator 4.61.0000 on Windows. A Time based SQL injection affects the nameTxt parameter on the main login page aka cse?cmd=LOGIN. This can be exploited directly, and remotely...
CVE-2020-26944
An issue was discovered in Aptean Product Configurator 4.61.0000 on Windows. A Time based SQL injection affects the nameTxt parameter on the main login page aka cse?cmd=LOGIN. This can be exploited directly, and remotely...
CVE-2020-26944
Aptean Product Configurator 4.61.0000 (Windows) contains a time-based SQL injection in the nameTxt parameter on the main login page (cse?cmd=LOGIN). The vulnerability can be exploited directly and remotely. According to the CVE entry, affected component/entry details indicate a high-severity issu...
The vulnerability of the UI Servlet component of the Oracle Configurator allows a attacker to gain access to read, modify, add, or delete data.
The vulnerability of the UI Servlet component of the Oracle Configurator is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, or delete data using the HTTP protocol...
Unspecified Vulnerability in Oracle Supply Chain Configurator
Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle. The product provides value chain planning, value chain execution, product lifecycle management and other functions. configurator is one of the integrated order management, quoting and sales configuration components...
CVE-2020-14669
Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...
CVE-2020-14669
Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...
CVE-2020-14669
CVE-2020-14669 affects Oracle Configurator (UI Servlet) within Oracle Supply Chain. Affected versions: 12.1 and 12.2. The vulnerability is exploitable by an unauthenticated attacker with network access via HTTP; exploitation requires user interaction, and successful access could lead to unauthori...
CVE-2020-14669
Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...
CVE-2020-14669
Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...
The vulnerability of the Installation component of the Oracle Configurator application allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Installation component of the Oracle Configurator relates to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...
Oracle Supply Chain Products Suite Configurator Unauthorized Access Vulnerability
Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle. The product provides value chain planning, value chain execution, product lifecycle management and other functions. configurator is one of the integrated order management, quoting and sales configuration components...
CVE-2020-2865
Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: Installation. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...
CVE-2020-2865
Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: Installation. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...
Design/Logic Flaw
Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: Installation. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...
CVE-2020-2865
Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: Installation. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...
CVE-2020-2865
Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: Installation. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...
CVE-2020-2865
CVE-2020-2865 affects the Oracle Configuretor (Oracle Supply Chain) — Installation component in Configurator versions 12.1 and 12.2. The issue allows an unauthenticated, network-accessible attacker via HTTP to read a subset of Confidential data. Root cause: insecure access to the Installation com...
Schneider Electric ProSoft Configurator Code Issue Vulnerability
Schneider Electric ProSoft Configurator is a configuration manager for logic controllers from Schneider Electric, France. A code issue vulnerability exists in Schneider Electric ProSoft Configurator v1.002 and prior versions for Modicon PMEPXM0100H modules. An attacker could exploit the...