CVE-2017-10059: Undefined Security Weakness

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Mobile Service. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher. Successful attacks...

PT-2017-11058

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.7.0 Description The issue affects the BI Publisher component, specifically the Mobile Service subcomponent. It allows a low-privileged attacker with network access via HTTP to compromise BI Publisher,...

Oracle BI Publisher Remote Vulnerability (CNVD-2017-27294)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other functionality.Oracle BI Publisher formerly known as XML Publisher is one of the reporting component...

Samsung Account Information Disclosure Vulnerability

Samsung account is a mobile client from Samsung South Korea that allows users to experience Samsung services. With Samsung account mobile, you can enjoy more functional features such as cell phone location, cell phone tracking and so on. Samsung Account suffers from an information disclosure...

Ali released 2 0 1 5 the mobile security vulnerability report-vulnerability warning-the black bar safety net

The first Chapter of 2 0 1 5-year application vulnerabilities 1.1 industry disclosure of the application vulnerability types and distribution 2 0 1 5 is an extraordinary year, all sectors of the media to the mobile application of the vulnerability degree of concern is also more and more high, the...

Multiple Cross-Site Scripting Vulnerabilities in Ericsson Drutt Mobile Service Delivery Platform

Ericsson Drutt Mobile Service Delivery Platform is a business support system for Service Delivery Platforms SDPs for on-site and off-portal services from Ericsson, Sweden. Multiple cross-site scripting vulnerabilities exist in Ericsson Drutt Mobile Service Delivery Platform 4, 5, and 6, which cou...

Ericsson Drutt Mobile Service Delivery Platform Open Redirect Vulnerability

Ericsson Drutt Mobile Service Delivery Platform MSDP is a business support system from Ericsson, Sweden, that supports Service Delivery Platforms SDPs for on-site and off-portal services. An open redirection vulnerability exists in the 3PI Manager of the Ericsson Drutt MSDP, which stems from the...

Ericsson Drutt Mobile Service Delivery Platform Directory Traversal Vulnerability

Ericsson Drutt Mobile Service Delivery Platform MSDP is a business support system from Ericsson, Sweden, that supports Service Delivery Platforms SDPs for on-site and off-portal services. A directory traversal vulnerability exists in Instance Monitor in Ericsson Drutt MSDP. A remote attacker coul...

CVE-2015-2167

Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp...

Open redirect

Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform MSDP 4.x, 5.x, and 6.x allow remote attackers to inject arbitrary web script or HTML via the 1 portal, 2 fromDate, 3 toDate, 4 fromTime, 5 toTime, 6 kword, 7 uname, 8 pname, 9...

Directory traversal

Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the default URI...

CVE-2015-2165

Multiple cross-site scripting XSS vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform MSDP 4.x, 5.x, and 6.x allow remote attackers to inject arbitrary web script or HTML via the 1 portal, 2 fromDate, 3 toDate, 4 fromTime, 5 toTime, 6 kword, 7 uname, 8 pname, 9...

CVE-2015-2167

Summary: CVE-2015-2167 is an open redirect vulnerability in Ericsson Drutt MSDP 3PI Manager (versions 4, 5, and 6). The issue arises from inadequate filtering of the url parameter in jsp/start-3pi-manager.jsp, enabling remote attackers to redirect users to arbitrary sites and potentially facilita...

CVE-2015-2167

Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp...

PT-2015-5637

Name of the Vulnerable Software and Affected Versions Ericsson Drutt Mobile Service Delivery Platform MSDP versions 4.x through 6.x Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the Report Viewer of Ericsson Drutt Mobile Service Delivery Platform MSDP. These...

CVE-2015-2167: Undefined Security Weakness

Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter to jsp/start-3pi-manager.jsp...

CVE-2015-2166: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the default URI...

CVE-2015-2165: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform MSDP 4.x, 5.x, and 6.x allow remote attackers to inject arbitrary web script or HTML via the 1 portal, 2 fromDate, 3 toDate, 4 fromTime, 5 toTime, 6 kword, 7 uname, 8 pname, 9...

PT-2015-5639

Name of the Vulnerable Software and Affected Versions Ericsson Drutt Mobile Service Delivery Platform MSDP versions 4 through 6 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. This is achieved via a URL in the url parameter to...