Sipwise C5 NGCP CSC - Click2Dial Cross-Site Request Forgery (CSRF)

Exploit Title: Sipwise C5 NGCP CSC - Click2Dial Cross-Site Request Forgery CSRF Date: 13.04.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.sipwise.com Sipwise C5 NGCP CSC CSRF Click2Dial Exploit Vendor: Sipwise GmbH Product web page: https://www.sipwise.com Affected version:...

PT-2021-2845

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description: The issue is related to errors in the code of the Loan Details and Loan Accounting Events components of the Oracle Loans product in Oracle E-Business Suite. This can be...

PT-2021-2841

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Asset Management versions 12.1.1 through 12.1.3 Oracle Enterprise Asset Management versions 12.2.3 through 12.2.10 Description: The issue is related to errors in the code of the Setup component of Oracle Enterprise Asset...

PT-2021-2847

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite component: Process Operations versions 12.1.3 Description: The issue is related to errors in the code of the Process Operations component of Oracle MES for Process Manufacturing in Oracle E-Business Suite. This can be...

PT-2021-2934

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to errors in the code of the Receipts component of Oracle Receivables in Oracle E-Business Suite. It allows a remote attacker to gain unauthorized access t...

PT-2021-2842

Name of the Vulnerable Software and Affected Versions: Oracle Financials Common Modules versions 12.1.1 through 12.1.3 Description: The issue is related to errors in the code of the Advanced Global Intercompany component. It can be exploited by a remote attacker using HTTP requests, allowing...

PT-2021-2936

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3 Description The issue is related to errors in the code of the Endeca component in Oracle Purchasing. It allows a remote attacker to gain unauthorized access to the device using HTTP requests. Successful...

PT-2021-2923

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to errors in the code of a subcomponent of Oracle Site Hub in the Oracle E-Business Suite system. It allows a remote attacker to gain unauthorized access t...

PT-2021-2914

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue is related to errors in the code of a subcomponent of Oracle E-Business Suite, specifically in the Time and...

PT-2021-2938

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue is related to errors in the code of the User Interface component of Oracle Projects in the Oracle E-Business...

PT-2021-2916

Name of the Vulnerable Software and Affected Versions Enterprise Manager for Fusion Middleware versions 11.1.1.9 through 12.2.1.3 Description The issue exists due to insufficient input validation in the FMW Control Plugin component. It allows a remote attacker to gain read access to data, modify...

PT-2021-2846

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description: The issue is related to errors in the code of a subcomponent, specifically the India Localization and Results componen...

PT-2021-2932

Name of the Vulnerable Software and Affected Versions Oracle Subledger Accounting versions 12.1.1 through 12.1.3 Description The issue is related to errors in the code of the Inquiries component of Oracle Subledger Accounting in Oracle E-Business Suite. It allows a remote attacker to gain...

PT-2021-2918

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Management version 11.1.2.4 Description The issue exists due to insufficient input validation in the Task Automation component of Oracle Hyperion Financial Management. This allows a remote attacker to read data, modif...

PT-2021-2927

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 10.3.6.0.0 Description The issue exists due to insufficient input validation in the Console component of Oracle WebLogic Server, allowing a remote attacker to modify, add, or delete data via HTTP requests...

PT-2021-2933

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to errors in the code of a subcomponent of Oracle Service Contracts in Oracle E-Business Suite. It allows a remote attacker to gain unauthorized access to...

PT-2021-2943

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Inventory Management version 9.1.0 Description The issue exists due to insufficient input validation in the Export to Reporting and Analytics component of Oracle Hospitality Inventory Management. This allows a remote attacke...

PT-2021-2931

Name of the Vulnerable Software and Affected Versions Oracle iStore versions 12.1.1 through 12.1.3 Description The issue is related to errors in the code of the Shopping Cart component in Oracle iStore, part of the Oracle E-Business Suite. This can be exploited by a remote attacker using HTTP...

Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct Cypher query language injection attacks on an affected system. This vulnerability is due to insufficient input validation by the web-based management...

PT-2021-2863 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to errors in the authorization procedure of the Cisco SD-WAN vManage web interface. It allows a remote attacker to gain unauthorized access to...