CVE-2018-2993

CVE-2018-2993 affects Oracle E-Business Suite’s Oracle CRM Technical Foundation (Preferences) and is present in 12.1.1–12.2.7. The flaw allows an unauthenticated attacker with network access via HTTP to compromise data, with UI interaction required and potential unauthorized read/write access; CV...

CVE-2018-3053

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications subcomponent: Internal Operations. Supported versions that are affected are 16.x and 17.x. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2018-3053

The CVE-2018-3053 vulnerability affects Oracle Retail Customer Management and Segmentation Foundation (Oracle Retail Applications) subcomponent Internal Operations, with affected versions 16.x and 17.x. The issue appears to be an access-control weakness that an attacker with network access over H...

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2018-13361)

Microsoft SharePoint Enterprise Server 2016 and SharePoint Foundation 2013 SP1 are both products of Microsoft Corporation USA.Microsoft SharePoint Enterprise Server 2016 is Microsoft SharePoint Enterprise Server 2016 is an enterprise business collaboration platform. The platform is used to...

Code injection

IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous session. IBM X-Force ID: 140977...

Code injection

IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system. IBM X-Force ID: 139026...

CVE-2018-1492

IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous session. IBM X-Force ID: 140977...

CVE-2018-1492

IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous session. IBM X-Force ID: 140977...

CVE-2018-1423

IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system. IBM X-Force ID: 139026...

CVE-2018-1423

IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system. IBM X-Force ID: 139026...

CVE-2018-1423

IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system. IBM X-Force ID: 139026...

CVE-2018-1423

CVE-2018-1423 affects IBM Jazz Foundation products (e.g., IBM Jazz Team Server and Rhapsody Design Manager). It permits an authenticated attacker to disclose sensitive information, enabling further attacks. IBM remediation for affected 6.x releases includes upgrading to 6.0.5 iFix6 or later (and ...

CVE-2018-1492

CVE-2018-1492 — normal mode IBM Jazz Foundation/Jazz Team Server family is affected. The issue allows a user with physical access to log in as another user because the server does not properly log out from the previous session. Affected products/versions include Rational CLM, RDNG, RELM, RTC, RQM...

CVE-2018-1492

IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous session. IBM X-Force ID: 140977...

Description of the security update for SharePoint Foundation 2013: July 10, 2018

Description of the security update for SharePoint Foundation 2013: July 10, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microso...

IBM Jazz Foundation Information Disclosure Vulnerability (CNVD-2018-23241)

IBM Rational Collaborative Lifecycle Management CLM is a set of collaborative lifecycle management solutions.Rational Quality Manager RQM is a set of collaborative, web-based quality management solutions. IBM Rational Collaborative Lifecycle Management CLM is a collaborative lifecycle management...

IBM FileNet Content Manager and Content Foundation Administration Console for Content Platform Engine XML External Entity Injection Vulnerability

IBM FileNet Content Manager and Content Foundation are both content management solutions for the FileNet P8 platform from IBM USA. The solutions combine document management with ready-to-use workflow tools to manage images, video, Web content, compliance documents, etc. Administration Console for...

CVE-2018-1542

IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine ACCE 5.2.1 and 5.5.0 are vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose...

CVE-2018-1542

IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine ACCE 5.2.1 and 5.5.0 are vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose...

CVE-2017-1509

IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 129719...