Hardcoded credentials

SAP BusinessObjects Business Intelligence Platform Web Intelligence HTML interface, corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can craft a message that contains malicious elements that will not be correctly...

CVE-2019-0396

SAP BusinessObjects BI Platform Web Intelligence HTML interface is affected by CVE-2019-0396 due to insufficient validation of an XML document from untrusted sources. The issue allows an attacker to craft XML with malicious elements that bypass filtering in certain workflows. Affected versions: 4...

CVE-2019-0382

A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform Web Intelligence-Publication related pages; corrected in version 4.2. Privileges are required in order to exploit this vulnerability...

CVE-2019-0382

A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform Web Intelligence-Publication related pages; corrected in version 4.2. Privileges are required in order to exploit this vulnerability...

Cross site scripting

A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform Web Intelligence-Publication related pages; corrected in version 4.2. Privileges are required in order to exploit this vulnerability...

CVE-2019-0382

A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform Web Intelligence-Publication related pages; corrected in version 4.2. Privileges are required in order to exploit this vulnerability...

CVE-2019-0382

CVE-2019-0382 affects SAP BusinessObjects Business Intelligence Platform, specifically the Web Intelligence publication-related pages. The vulnerability is a Cross-Site Scripting flaw caused by insufficient input sanitization, allowing an attacker with the required privileges to exploit it. Corre...

Google's Plan to Crunch Health Data on Millions of Patients Draws Fire

Tech behemoth Google is using artificial intelligence to reportedly slice and dice personal healthcare details on millions of Americans. That has some researchers diagnosing the company with HIPAA violations and prescribing regulatory controls as a remedy. And, at least one federal regulator is...

CVE-2019-3641

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server TIE Server 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages...

CVE-2019-3641

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server TIE Server 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages...

CVE-2019-3641

CVE-2019-3641 affects McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0, where an Abuse of Authorization in the exposed APIs allows remote authenticated users to modify stored reputation data via specially crafted messages. The root cause is an authorization/control weakness in TIE Se...

CVE-2019-3641 Exploitation of Authorization in TIE Server

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server TIE Server 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages...

New partnership brings together Talos’ visibility with IR’s unmatched response capabilities

By Jon Munshaw. The threat landscape has evolved into a complex, challenging environment for organizations everywhere. A talent shortage, combined with an increase in incidents, has led to a generally weak security posture among most organizations. Defenders’ backs are up against the wall...

McAfee Threat Intelligence Exchange Server CVE-2019-3641 Unauthorized Access Vulnerability

Description McAfee Threat Intelligence Exchange Server is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. McAfee Threat Intelligence Exchange Server 3.0.0 is vulnerable...

The vulnerability of the Analytics Actions sub-component of the Oracle Business Intelligence Enterprise Edition software, specifically within the Oracle Fusion Middleware software platform, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Analytics Actions sub-component of the Oracle Business Intelligence Enterprise Edition software component of the Oracle Fusion Middleware platform is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating...

The vulnerability of the Analytics Actions sub-component of the Oracle Business Intelligence Enterprise Edition software, which allows a malicious actor to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the Analytics Actions sub-component of the Oracle Business Intelligence Enterprise Edition software component of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating...

threat_note - DPS' Lightweight Investigation Notebook

threatnote is a web application built by Defense Point Security to allow security researchers the ability to add and retrieve indicators related to their research. As of right now this includes the ability to add IP Addresses, Domains and Threat Actors, with more types being added in the future...

October Release: Q&A with Ari Weil

Shortly after Akamai announced the October 2019 Release with new features and capabilities across its security, performance and media product lines, Akamai's VP of Product Marketing, Ari Weil, took over Akamai's Twitter account for a live October Release Q&A. For those that missed the live event,...

How Machine Learning is Changing the Face of Financial Services

Artificial intelligence AI has become integrated into our everyday lives. It powers what we see in our social media newsfeeds, activates facial recognition to unlock our smartphones, and even suggests music for us to listen to. Machine learning, a subset of AI, is progressively integrating into o...

Microsegmentation and Isolation: 2 Essential Strategies in Zero-Trust Security

The headlines over the past few years have been consistent – enterprises are pouring more and more money into cybersecurity countermeasures. Indications are that 2020 will be no different, with reports that nearly three quarters of CISOs plan to ask their CFOs for increased cybersecurity investme...