8573 matches found
CVE-2014-6581: Undefined Security Weakness
Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Extract/Load...
CVE-2015-0399: Undefined Security Weakness
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Analytics Web General...
PT-2015-4610
Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition versions 10.1.3.4.2 and 11.1.1.7 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to Analytics Web General...
PT-2015-3889
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.0.4, 12.0.5, 12.0.6, 12.1.1, 12.1.2, 12.1.3, 12.2.2, 12.2.3, 12.2.4 Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via unknown vectors related...
Government Demands for Verizon Customer Data Drop
The number of subpoenas, total orders and warrants that the United States government delivered to Verizon all dropped in the second half of 2014, according to the company’s latest transparency report. The giant telecom provider released data on Thursday that showed a decrease in subpoenas of abou...
Encryption is Not the Enemy
There are few things scarier these days than a politician stepping in front of a microphone, taking a deep breath and opening his mouth to pontificate on security. A long list of American elected officials have reinforced this, and on Monday, UK Prime Minister David Cameron jumped to the head of...
FBI Director: 'High Confidence' in North Korea Attribution
When the FBI publicly announced that the North Korean regime was responsible for an embarrassing compromise of corporate networks at Sony Pictures Entertainment, security experts remained skeptical. FBI Director James Comey doubled down on the assertion yesterday at the Fordham University...
The U.S. Department of Energy's security threat intelligence use cases for Flexible Transform-vulnerability warning-the black bar safety net
2015-01-07 2 2:0 5 ! Slide 1 Recently will continue to share the collection to the security threat intelligence-related material, the first a first to a U.S. Department of Energy's security threat intelligence practice. Security threat intelligence technology in the United States has been widely...
Cross site scripting
Cross-site scripting XSS vulnerability in the server in IBM Cognos Business Intelligence 10.1 before IF10, 10.1.1 before IF9, 10.2 before IF11, 10.2.1 before IF8, and 10.2.1.1 before IF7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-6145
CVE-2014-6145 is an XSS flaw in IBM Cognos Business Intelligence server. The vulnerability arises from improper validation of user-supplied input, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Affected versions include IBM Cognos BI 10.1 (before IF1...
CVE-2014-6145: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the server in IBM Cognos Business Intelligence 10.1 before IF10, 10.1.1 before IF9, 10.2 before IF11, 10.2.1 before IF8, and 10.2.1.1 before IF7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
PT-2014-7065
Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence versions 10.1 before IF10 IBM Cognos Business Intelligence versions 10.1.1 before IF9 IBM Cognos Business Intelligence versions 10.2 before IF11 IBM Cognos Business Intelligence versions 10.2.1 before IF8 IBM...
FISC Approves 90-Day Extension of Section 215 Surveillance Authority
The secret Foreign Intelligence Surveillance Court has authorized a 90-day extension to the Section 215 bulk telephone collection program used by the National Security Agency, giving the agency through the end of February to run the program in the absence of legislation establishing a new...
Operation Cleaver — Iranian Hackers Targeting Critical Infrastructure Worldwide
For over past two years, Iranian hackers have infiltrated computer networks of some of the world's top organizations including airlines, defense contractors, universities, military installations, hospitals, airports, telecommunications firms, government agencies, and energy and gas companies,...
Experts Question Legality of Use of Regin Malware by Intel Agencies
The disclosure of the Regin APT malware campaign this week has spurred much speculation about the source of the attack, with many experts pointing the finger at either the NSA or GCHQ, the British spy agency. Though security researchers involved in uncovering the attack have remained mum on the...
Lame Duck Senate to Vote on NSA Reforming USA FREEDOM Act
The United States Senate will move to vote on the USA FREEDOM Act before the current congressional session closes at the end of the year, a move that pleases digital rights groups. In its current form, the bill would ban the bulk collection of Americans’ private records while granting the...
Information disclosure
The SAP Business Intelligence Development Workbench allows remote attackers to obtain sensitive information by reading unspecified files...
Code injection
The User & Server configuration, InfoView refresh, user rights BI-BIP-ADM component in SAP Business Intellignece allows remote attackers to obtain audit event details via unspecified vectors...
