CVE-2020-14669

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: UI Servlet. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attack...

The vulnerability of the Installation component of the Oracle Configurator application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Installation component of the Oracle Configurator relates to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

Oracle Supply Chain Products Suite Configurator Unauthorized Access Vulnerability

Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle. The product provides value chain planning, value chain execution, product lifecycle management and other functions. configurator is one of the integrated order management, quoting and sales configuration components...

CVE-2020-2865

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: Installation. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...

CVE-2020-2865

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: Installation. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...

Design/Logic Flaw

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: Installation. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...

CVE-2020-2865

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: Installation. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...

CVE-2020-2865

Vulnerability in the Oracle Configurator product of Oracle Supply Chain component: Installation. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful...

CVE-2020-2865

CVE-2020-2865 affects the Oracle Configuretor (Oracle Supply Chain) — Installation component in Configurator versions 12.1 and 12.2. The issue allows an unauthenticated, network-accessible attacker via HTTP to read a subset of Confidential data. Root cause: insecure access to the Installation com...

Schneider Electric ProSoft Configurator Code Issue Vulnerability

Schneider Electric ProSoft Configurator is a configuration manager for logic controllers from Schneider Electric, France. A code issue vulnerability exists in Schneider Electric ProSoft Configurator v1.002 and prior versions for Modicon PMEPXM0100H modules. An attacker could exploit the...

CVE-2020-7474

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator v1.002 and prior, for the PMEPXM0100 H module, which could cause the execution of untrusted code when using double click to open a project file which may trigger execution of a malicious DLL...

CVE-2020-7474

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator v1.002 and prior, for the PMEPXM0100 H module, which could cause the execution of untrusted code when using double click to open a project file which may trigger execution of a malicious DLL...

CVE-2020-7474

ProSoft Configurator (v1.002 and earlier) is affected by CWE-427 Uncontrolled Search Path Element in the PMEPXM0100(H) module. The vulnerability could enable execution of untrusted code when a user double-clicks to open a project file, potentially triggering a malicious DLL. CVSS details in the s...

CVE-2020-7474

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator v1.002 and prior, for the PMEPXM0100 H module, which could cause the execution of untrusted code when using double click to open a project file which may trigger execution of a malicious DLL...

CVE-2019-6858

A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...

Path traversal

A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...

CVE-2019-6858

CVE-2019-6858 affects MSX Configurator (software) prior to version V1.0.8.1. The vulnerability is CWE-427: Uncontrolled Search Path Element, which could lead to privilege escalation by injecting a malicious DLL. The public description confirms a local impact with partial to high confidentiality/i...

CVE-2019-6858

A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...

The vulnerability of the “ARM Relayer” and “Configurator” software components of the EKRASMS-SP suite of programs, related to the loading of a non-existent dynamic library, allows a violator to execute arbitrary code.

The vulnerability of the “ARM Relay Operator” and “Configurator” software components of the EKRASMS-SP suite lies in the loading of a nonexistent dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code using the specially crafted dynamic library...

SugarCRM PHP code injection vulnerability (CNVD-2019-34419)

SugarCRM is a set of open source customer relationship management software . A PHP code injection vulnerability exists in the Configurator module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit the vulnerability to execute arbitrary code...