Lucene search
+L

95 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•6 views

CVE-2021-2090: Undefined Security Weakness

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Display. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Ema...

8.2CVSS5.7AI score0.01169EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•4 views

PT-2021-1703

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue is related to the Message Display component of the Oracle Email Center product. It allows an unauthenticated...

8.2CVSS0.01169EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•4 views

PT-2021-1750

Name of the Vulnerable Software and Affected Versions Oracle Email Center versions 12.1.1 through 12.1.3 Oracle Email Center versions 12.2.3 through 12.2.10 Description The issue is related to insufficient access control in the Message Display component of Oracle Email Center, allowing an...

8.2CVSS5.7AI score0.01169EPSS
SaveExploits0References6
OSV
OSV
•added 2020/12/07 10:50 a.m.•16 views

SUSE-SU-2020:3632-1 Security update for mutt

This update for mutt fixes the following issues: - Find and display the content of messages properly. bsc1179461 - CVE-2020-28896: incomplete connection termination could send credentials over unencrypted connections. bsc1179035 - Avoid that message with a million tiny parts can freeze MUA for...

5.3CVSS5.4AI score0.02351EPSS
SaveExploits0References5
Veracode
Veracode
•added 2020/12/06 3:29 a.m.•36 views

Cross-Site Scripting (XSS)

roundcube is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in a user's browser via HTML messages during message display...

6.1CVSS2AI score0.02058EPSS
SaveExploits0References10Affected Software1
Mend
Mend
•added 2020/08/12 12:29 p.m.•1 views

CVE-2020-16145

Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15...

6.1CVSS0.02058EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
•added 2020/08/05 12:00 a.m.•18 views

The vulnerability of the Message Display component of the Oracle Email Center software allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Message Display component of the Oracle Email Center messaging software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

8.2CVSS7.7AI score0.01256EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/07/15 12:00 a.m.•3 views

PT-2020-3342

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to insufficient access control in the Message Display component of Oracle Email Center, allowing an...

8.2CVSS0.01256EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/15 12:00 a.m.•7 views

CVE-2020-14666: Undefined Security Weakness

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Display. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Emai...

8.2CVSS5.7AI score0.01256EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/05/08 12:00 a.m.•15 views

The vulnerability of the Email Address list and Message Display components of the Oracle Email Center software, a business automation system within the Oracle E-Business Suite. This allows attackers to access, modify, add, or delete data, or gain unauthorized access to protected information.

The vulnerability of the Email Address list and Message Display components of the Oracle Email Center software, a messaging automation system within the Oracle E-Business Suite, is related to lack of access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete...

8.2CVSS7.5AI score0.01314EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/05/08 12:00 a.m.•18 views

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite, a business automation system, allows a malicious individual to access, modify, add, or delete data, or to gain unauthorized access to protected information.

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to...

8.2CVSS7.4AI score0.01314EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/15 12:00 a.m.•6 views

CVE-2020-2794: Undefined Security Weakness

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Email Address list and Message Display. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

8.2CVSS7.4AI score0.01314EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/15 12:00 a.m.•8 views

CVE-2020-2796: Undefined Security Weakness

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Display. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Emai...

8.2CVSS7.4AI score0.01314EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/04/15 12:00 a.m.•4 views

PT-2020-2117

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Email Address list and Message Display components of Oracle Emai...

8.2CVSS5.7AI score0.01314EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/04/15 12:00 a.m.•5 views

PT-2020-2116

Name of the Vulnerable Software and Affected Versions Oracle Email Center versions 12.1.1 through 12.1.3 Oracle Email Center versions 12.2.3 through 12.2.9 Description The issue is related to inadequate access control in the Message Display component of Oracle Email Center, part of the Oracle...

8.2CVSS5.8AI score0.01314EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2020/02/17 12:00 a.m.•15 views

The vulnerability of the Message Display component of the Oracle Email Center software allows a malicious individual to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information.

The vulnerability of the Message Display component in the Oracle Email Center software lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information usin...

8.2CVSS7.4AI score0.01314EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/02/17 12:00 a.m.•28 views

The vulnerability of the Message Display component of the Oracle Email Center software allows a malicious individual to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information.

The vulnerability of the Oracle Flow Builder component, a software tool for testing web applications, web services, and databases within the Oracle Application Testing Suite, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to modify,...

8.2CVSS7.5AI score0.01314EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/02/17 12:00 a.m.•16 views

The vulnerability of the Message Display component of the Oracle Email Center software allows a malicious individual to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information.

The vulnerability of the Message Display component of the Oracle Email Center messaging software is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to obtain unauthorized access to protected...

8.2CVSS7.4AI score0.01314EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/02/17 12:00 a.m.•13 views

The vulnerability of the Message Display component of the Oracle Email Center software allows a malicious individual to gain access to modify, add, or delete data, or to gain unauthorized access to protected information.

The vulnerability of the Message Display component in the Oracle Email Center software lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information usin...

7.8CVSS7.4AI score0.01314EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2020/01/15 5:15 p.m.•21 views

Code injection

Vulnerability in the Oracle Email Center product of Oracle E-Business Suite component: Message Display. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Ema...

5.8CVSS8.1AI score0.01314EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder