Security Bulletin: IBM InfoSphere Data Quality Exception Console is affected by a Reflected XSS (Cross-Site Scripting) vulnerability

Summary A Reflected XSS Cross-Site Scripting vulnerability was addressed by IBM InfoSphere Data Quality Exception Console. Vulnerability Details CVEID: CVE-2019-4238 DESCRIPTION: IBM InfoSphere Information Server is vulnerable to cross-site scripting. This vulnerability allows users to embed...

Security Bulletin: A vulnerability in Apache Solr affects IBM InfoSphere Information Server

Summary A vulnerability in Apache Solr was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2017-12629 DESCRIPTION: Apache Lucene could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of XML External Entity XXE entries...

dataqualitycampaign.org XSS vulnerability

Open Bug Bounty ID: OBB-719347 Description| Value ---|--- Affected Website:| dataqualitycampaign.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

iWay Data Quality Suite Web Console 10.6.1.ga - XML External Entity Injection Vulnerability

Exploit for windows platform in category web applications Exploit Title: iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20 – XML External Entity Injection Exploit Author: Sureshbabu Narvaneni Author Blog : https://nullnews.in Vendor Homepage: www.informationbuilders.co.uk Software Link:...

iWay Data Quality Suite Web Console 10.6.1.ga - XML External Entity Injection

iWay Data Quality Suite Web Console 10.6.1.ga - XML External Entity Injection Exploit Title: iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20 – XML External Entity Injection Google Dork: N/A Date: 2018-09-27 Exploit Author: Sureshbabu Narvaneni Author Blog : https://nullnews.in Vendor...

iWay Data Quality Suite Web Console 10.6.1.ga XML Injection

Exploit Title: iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20 a XML External Entity Injection Google Dork: N/A Date: 2018-09-27 Exploit Author: Sureshbabu Narvaneni Author Blog : https://nullnews.in Vendor Homepage: www.informationbuilders.co.uk Software Link:...

iWay Data Quality Suite Web Console 10.6.1.ga - XML External Entity Injection

Exploit Title: iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20 – XML External Entity Injection Google Dork: N/A Date: 2018-09-27 Exploit Author: Sureshbabu Narvaneni Author Blog : https://nullnews.in Vendor Homepage: www.informationbuilders.co.uk Software Link:...

CVE-2018-17411

An XML External Entity XXE vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20...

CVE-2018-17411

An XML External Entity XXE vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20...

Xxe

An XML External Entity XXE vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20...

CVE-2018-17411

CVE-2018-17411 describes an XML External Entity (XXE) vulnerability in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20. The issue is listed with high impact across confidentiality, integrity, and availability (CVSS v3 base score 9.8), with network access, no privileges required, and no u...

CVE-2018-17411

An XML External Entity XXE vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20...

Security Bulletin: IBM InfoSphere Data Quality Console is vulnerable to a Cross-Site Scripting (XSS) attack when adding new project connections (CVE-2014-3071)

Summary IBM InfoSphere Data Quality Console is vulnerable to a Cross-Site Scripting XSS attack while adding new project connections. An attacker can trick a signed on user to clicking on a link, and then the attacker could obtain the user's cookie and act with the user's privileges in the...

Oracle Data Quality Trillium Based SetBasicPreviewData Type Confusion (CVE-2015-4759)

A remote code execution vulnerability exists in Oracle Data Quality TSS12.LoaderWizard.lwctrl ActiveX control. The vulnerability is due to a type confusion when handling data passed to SetBasicPreviewData. A remote attacker can exploit this vulnerability by enticing a user to access a maliciously...

Oracle Data Quality Trillium Based SetEntities Type Confusion (CVE-2015-0444)

A remote code execution vulnerability exists in Oracle Data Quality TSS12.LoaderWizard.lwctrl ActiveX control. The vulnerability is due to a type confusion when handling data passed to SetEntities. A remote attacker can exploit this vulnerability by enticing a user to access a maliciously crafted...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443,...

CVE-2015-2635

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443,...

CVE-2015-2634

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443,...

CVE-2015-0446

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443,...

CVE-2015-0445

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443,...