GHSA-CGCV-5272-97PR vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver...

CVE-2023-2728 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver...

GHSA-XC8M-28VV-4PJC vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver...

CVE-2023-2431 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver...

PT-2023-2528 · Oracle · Oracle Iprocurement +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.12 Description: The issue is related to insufficient input validation in the E-Content Manager Catalog component. It allows a low-privileged attacker with network access via HTTP to...

CVE-2023-21825

CVE-2023-21825 affects Oracle E-Business Suite’s Oracle iSupplier Portal (Supplier Management). Versions 12.2.6–12.2.8 are affected. An unauthenticated, network-accessible attacker can exploit via HTTP to obtain unauthorized read access to a subset of data. The issue is described as easily exploi...

Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload

This module exploits an unauthenticated arbitrary file upload vulnerability in Oracle Web Applications Desktop Integrator, as shipped with Oracle EBS versions 12.2.3 through to 12.2.11, in order to gain remote code execution as the oracle user. Module Options msf use...

U.S. Dept Of Defense: Local File Read vulnerability on ██████████ [HtUS]

Kindly check screenshot ███████: In case if scope question. Because i picked this site from DOD website list under 'dod sites'. Lets move on to the bug now : Summary: Local File Include vulnerability on ███. Oracle Ebs Bispgrapgh is prone to a directory traversal vulnerability that can be exploit...

CVE-2022-21500

CVE-2022-21500 affects Oracle E-Business Suite, specifically the Manage Proxies component, with the vulnerable line item in 12.2 (12.1 is not impacted). The issue enables an attacker to access or potentially take over data in the Oracle E-Business Suite via HTTP over the network, with CVSSv3.1 ba...

CVE-2022-21354

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks...

InsightCloudSec Supports 12 New AWS Services Announced at re:Invent

In case you didn’t hear, Amazon hosted AWS re:Invent in Las Vegas last week. As has come to be expected at the annual mega-event, Amazon made a number of huge announcements and launched a significant number of improvements and brand-new services and settings to enhance their public cloud platform...

CVE-2021-2406

CVE-2021-2406 affects Oracle E-Business Suite’s Oracle Collaborative Planning product, User Interface component. Affected versions are 12.1.1–12.1.3. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Collaborative Planning, potentially enabling u...

CVE-2021-2398

The CVE-2021-2398 entry covers a vulnerability in Oracle E-Business Suite’s Oracle Advanced Outbound Telephony (Region Mapping) affecting versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue allows a low-privilege, unauthenticated attacker with network access via HTTP to compromise data within Or...

CVE-2021-2259

CVE-2021-2259 affects Oracle E-Business Suite Payables (India Localization, Results). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. An attacker with network access via HTTP and low privileges can compromise Oracle Payables, with potential unauthorized creation/deletion/modification of d...

CVE-2021-2189

CVE-2021-2189 affects Oracle E-Business Suite Sales Offline, Template component, with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.10. An unauthenticated, network-accessible attacker over HTTP can trigger a hang or crash in Oracle Sales Offline (DoS). The vulnerability is documented across mul...

Downloading and Exploring AWS EBS Snapshots

The post Downloading and Exploring AWS EBS Snapshots appeared first on Rhino Security Labs...

CVE-2020-14822

CVE-2020-14822 affects Oracle E-Business Suite Installed Base APIs. Affected are Oracle E-Business Suite versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability is exploitable over HTTP by an unauthenticated, network-reachable attacker and, per the entry, requires user interaction, with pote...

CVE-2020-14805

CVE-2020-14805 affects Oracle E-Business Suite Secure Enterprise Search (component: Search Integration Engine). Affected: E-Business Suite 12.1.3 and 12.2.3–12.2.10. Description: unauthenticated attacker with network access over HTTP can compromise the Secure Enterprise Search, potentially causin...

CVE-2020-14811

CVE-2020-14811 affects Oracle E-Business Suite Applications Manager (AMP EBS Integration). Affected versions: 12.1.3 and 12.2.3–12.2.10. An unauthenticated attacker with network access over HTTP can read a subset of Oracle Applications Manager data. The CVSSv3.1 base score is 5.3 (Confidentiality...

How to work with Amazon EBS encryption using Veeam Backup for AWS

Challenge You want to backup or restore instances with encrypted volumes. You receive one of the following related errors while working with encrypted volumes: Encrypted snapshots with EBS default key cannot be shared The default encryption key in the region of your service account is aws/ebs...