149 matches found
IBM OpenPages GRC Platform Cross-Site Request Forgery Vulnerability
IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms for managing enterprise risk and compliance challenges. A cross-site request forgery vulnerability exists in IBM OpenPages GRC Platform that allows a remote attacker to construct a malicious URI, trick a user into...
IBM OpenPages GRC Platform Security Restriction Bypass Vulnerability
IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms for managing enterprise risk and compliance challenges. The IBM OpenPages GRC Platform failed to perform adequate access checks on JSON requests, allowing a remote attacker to exploit a vulnerability to change user...
CVE-2011-1381
Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended access restrictions via unknown vectors...
CVE-2014-3011
IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified vectors...
CVE-2014-3011
IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified vectors...
PT-2014-2109
Name of the Vulnerable Software and Affected Versions IBM OpenPages GRC Platform version 6.1.0.1 before IF4 Description The issue allows remote attackers to bypass intended access restrictions. Recommendations For IBM OpenPages GRC Platform version 6.1.0.1, apply the IF4 patch to resolve the issu...
PT-2014-5020
Name of the Vulnerable Software and Affected Versions IBM OpenPages GRC Platform version 6.1.0.1 before IF4 Description The issue allows remote attackers to conduct link injection attacks. Recommendations For IBM OpenPages GRC Platform version 6.1.0.1, apply IF4 or a later fix to resolve the issu...
CVE-2011-1381: Undefined Security Weakness
Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended access restrictions via unknown vectors...
CVE-2014-3011: Improper Control of Generation of Code
IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified vectors...