CVE-2019-4387

CVE-2019-4387 affects IBM Sterling B2B Integrator Standard Edition, vulnerable in versions 6.0.0.0–6.0.2.0 to SQL injection due to insufficient input sanitization. A remote attacker could send crafted SQL statements to view, add, modify, or delete data in the back-end database. IBM’s bulletin con...

IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2019-44534)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A SQL injection vulnerability exists in IBM Sterling B2B...

IBM Sterling B2B Integrator CVE-2019-4387 SQL Injection Vulnerability

Description IBM Sterling B2B Integrator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

Security Bulletin: There are multiple vulnerabilities in IBM Runtime Environment Java Technology Edition Version 7.0 and Version 8.0 that is used by Security Directory Integrator. These issues were disclosed as part of the IBM Java SDK updates in Jul 2019

Summary There are multiple vulnerabilities in IBM Runtime Environment Java Technology Edition Version 7.0 and Version 8.0 that is used by Security Directory Integrator. These issues were disclosed as part of the IBM Java SDK updates in Jul 2019 Vulnerability Details CVE-2019-4473 Description On t...

CVE-2019-2943

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Studio. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Integrator. Successful...

CVE-2019-2943

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Studio. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Integrator. Successful...

Buffer overflow

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Studio. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Integrator. Successful...

CVE-2019-2943

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Studio. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Integrator. Successful...

CVE-2019-2943

CVE-2019-2943 affects Oracle Data Integrator Studio (component) in Oracle Fusion Middleware, version 12.2.1.3.0. The vulnerability allows a low-privileged user with network access via HTTP to access or compromise Oracle Data Integrator data. The CVSS v3.0 base score is 6.5 (Confidentiality impact...

CVE-2019-2943

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Studio. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Integrator. Successful...

Oracle Data Integrator Unauthorized Access Vulnerability

Oracle Data Integrator is an extract, load, and transform tool that provides a graphical environment for building, managing, and maintaining data integration processes in business intelligence systems. A security vulnerability exists in the Studio component of Oracle Data Integrator 12.2.1.3.0. A...

CloudCTI HIP Integrator Recognition Configuration Tool Elevation of Privilege Vulnerability

CloudCTI HIP Integrator Recognition Configuration Tool is an integrator recognition configuration tool from CloudCTI, Netherlands. A security vulnerability exists in the CloudCTI HIP Integrator Recognition Configuration Tool that originates from an elevated privilege process that can execute...

Oracle Data Integrator CVE-2019-2943 Remote Security Vulnerability

Description Oracle Data Integrator is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Studio' component is affected. This vulnerability affects the following supported versions: 12.2.1.3.0 Technologies Affected Oracle Data Integrator...

CVE-2019-9745

CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration. This tool communicates with a service Recognition Update Client Service via an insecure communication channel Named Pipe. The data JSON sent via this channel is used to import data from...

CVE-2019-9745

CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration. This tool communicates with a service Recognition Update Client Service via an insecure communication channel Named Pipe. The data JSON sent via this channel is used to import data from...

CVE-2019-9745

CVE-2019-9745 affects the CloudCTI HIP Integrator Recognition Configuration Tool. The vulnerability arises in the EXQUISE integration: a lower-privileged user can craft the data sent over an insecure Named Pipe (RUCS20151029) to the Recognition Update Client Service (running as NT AUTHORITY\SYSTE...

Oracle October 2019 Critical Patch Update Multiple Vulnerabilities

Description Oracle has released an advance notification regarding the October 2019 Critical Patch Update CPU to be released on October 15, 2019. The update addresses 240 vulnerabilities affecting the following software: Oracle Database Server, versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c Oracl...

CVE-2019-6179

An XML External Entity XXE processing vulnerability was reported in Lenovo XClarity Administrator LXCA prior to version 2.5.0 , Lenovo XClarity Integrator LXCI for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator LXCI for VMWare vCenter prior to version 6.1.0 that...

Xxe

An XML External Entity XXE processing vulnerability was reported in Lenovo XClarity Administrator LXCA prior to version 2.5.0 , Lenovo XClarity Integrator LXCI for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator LXCI for VMWare vCenter prior to version 6.1.0 that...

CVE-2019-6179

CVE-2019-6179 is an XML External Entity (XXE) processing vulnerability found in Lenovo XClarity Administrator (LXCA) before 2.5.0, Lenovo XClarity Integrator (LXCI) for Microsoft System Center before 7.7.0, and LXCI for VMware vCenter before 6.1.0. The issue, as described in Lenovo’s advisory, co...