CVE-2015-5019

IBM Sterling Integrator 5.1 before 50100048 and Sterling B2B Integrator 5.2 before 50205009 allow remote authenticated users to read or upload files by leveraging a password-change requirement...

CVE-2015-5019

IBM Sterling Integrator 5.1 before 50100048 and Sterling B2B Integrator 5.2 before 50205009 allow remote authenticated users to read or upload files by leveraging a password-change requirement...

CVE-2015-5019

CVE-2015-5019 affects IBM Sterling Integrator 5.1 (pre-5010004_8) and Sterling B2B Integrator 5.2 (pre-5020500_9). The issue allows remote authenticated users to read or upload files by exploiting a password-change requirement, enabling unauthorized file access within affected components. IBM’s a...

CVE-2015-4992

IBM Sterling B2B Integrator 5.2 before 50205008 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors...

CVE-2015-4992

IBM Sterling B2B Integrator 5.2 before 50205008 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors...

CVE-2015-4992

IBM Sterling B2B Integrator (versions 5.1 and 5.2) is affected by CVE-2015-4992, a clickjacking vulnerability. A remote attacker could hijack a user’s click actions by luring them to a malicious page, enabling UI redress attacks. Remediation in the IBM advisories involves applying interim fixes: ...

CVE-2015-4992

IBM Sterling B2B Integrator 5.2 before 50205008 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors...

Oracle Endeca Information Discovery Integrator ETL Server MoveFile Directory Traversal (CVE-2015-2605)

A directory traversal vulnerability has been reported in Oracle Endeca Information Discovery Integrator ETL Server. The vulnerability is due to a lack of input validation. A remote attacker can exploit this vulnerability by sending crafted SOAP requests to the target system, leading to informatio...

IBM Sterling B2B Integrator Clickjacking Vulnerability

IBM Sterling B2B Integrator is a suite of software that integrates essential B2B processes, transactions and relationships. IBM Sterling B2B Integrator suffers from a security vulnerability that allows a remote attacker to hijack a user's click-to-action by sending a specially crafted HTTP reques...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Data Integrator sub-component of the Oracle Fusion Middleware software exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Data Integrator sub-component of the Oracle Fusion Middleware software exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Data Integrator component of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity, availability, and confidentiality of information...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Data Integrator component of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity, availability, and confidentiality of information...

The vulnerability of the Oracle E-Business Suite system for automating business processes allows a perpetrator to compromise the integrity of information.

The vulnerability of the Oracle Web Applications Desktop Integrator component within the Oracle E-Business Suite automation system is related to code errors. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the integrity of the information...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Data Integrator sub-component of the Oracle Fusion Middleware software exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Data Integrator sub-component of the Oracle Fusion Middleware software exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Data Integrator component of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity, availability, and confidentiality of information...

Unspecified Vulnerability in Oracle Fusion Oracle Data Integrator Component (CNVD-2015-04752)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Oracle Data Integrator component that can be exploited by remote attackers to compromise system availability, integrity, and confidentiality...

Oracle Endeca Information Discovery Integrator ETL Server Authentication Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Oracle Endeca Information Discovery. Authentication is not required to exploit this vulnerability. The specific flaw exists within the generation and use of session hashes. The issue lies in the use of...

Unspecified Vulnerability in Oracle Fusion Oracle Data Integrator Component (CNVD-2015-04750)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Oracle Data Integrator component that can be exploited by remote attackers to compromise system availability, integrity, and confidentiality...