CVE-2020-2946

CVE-2020-2946 affects Oracle Enterprise Manager’s Application Performance Management component (EM Request Monitoring). Affected supported versions are 12.1.0.5, 13.2.0.0 and 13.3.0.0. The vulnerability allows a high-privileged attacker with network access over HTTP to compromise APM, potentially...

CVE-2020-2946

Vulnerability in the Application Performance Management product of Oracle Enterprise Manager component: EM Request Monitoring. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2020-2946: Undefined Security Weakness

Vulnerability in the Application Performance Management product of Oracle Enterprise Manager component: EM Request Monitoring. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

Oracle Application Performance Management Unauthorized Access Vulnerability

Oracle Enterprise Manager is Oracle's on-premise deployment management platform that provides a single management platform for managing all customer Oracle deployments. application Performance Management is the application performance management component of this. A security vulnerability exists ...

PT-2020-2134

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager versions 12.1.0.5, 13.2.0.0, 13.3.0.0 Description The issue is related to insufficient access control in the Application Performance Management component of Oracle Enterprise Manager, specifically in the EM Request...

Security Bulletin: A vulnerability in IBM Websphere Application Server affects the IBM Performance Management product (CVE-2019-4720)

Summary IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available memory. IBM Performance Management has addressed the...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Performance Management products

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Performance Management. IBM Performance Management has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-2989 DESCRIPTION: An unspecified vulnerability in Java SE could allow an...

Security Bulletin: A vulnerability in Netty affects the IBM Performance Management product (CVE-2019-16869)

Summary Netty is vulnerable to HTTP request smuggling, caused by a flaw when handling unusual whitespaces before the colon in HTTP headers. By sending a specially-crafted request, an attacker could exploit this vulnerability to poison the web cache, bypass web application firewall protection, and...

Security Bulletin: A vulnerability in IBM Websphere Application Server affects the IBM Performance Management product (CVE-2019-4441)

Summary A vulnerability in IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM Performance Management has addressed the applicable CVE. Vulnerability Details CVEID:...

Security Bulletin: A vulnerability in IBM Websphere Application Server affects the IBM Performance Management product (CVE-2019-4305)

Summary A vulnerability in IBM Websphere Application Server - Liberty could allow a remote attacker to obtain sensitive information caused by the improper setting of a cookie. IBM Performance Management has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-4305 DESCRIPTION: IBM...

Security Bulletin: A vulnerability in IBM Websphere Application Server affects the IBM Performance Management product (CVE-2019-4304)

Summary A vulnerability in IBM Websphere Application Server - Liberty could allow a remote attacker to bypass security restrictions caused by improper session validation. IBM Performance Management has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-4304 DESCRIPTION: IBM...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Performance Management products

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Performance Management. IBM Performance Management has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-11772 DESCRIPTION: In Eclipse OpenJ9 prior to 0.15, the String.getBytesint, int,...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Performance Management products

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Performance Management. IBM Performance Management has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could allow an...

Security Bulletin: A vulnerability in Apache CFX affects the IBM Performance Management product (CVE-2019-12406)

Summary Apache CXF is vulnerable to a denial of service, caused by the failure to restrict the number of message attachments present in a given message. By sending a specially-crafted message containing an overly large number of message attachments, a remote attacker could exploit this...

Security Bulletin: A vulnerability in jQuery affects the IBM Performance Management product (CVE-2019-11358)

Summary jQuery, as used in Drupal core, is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote authenticated attacker could exploit this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site. An...

A QUICk Introduction to HTTP/3

HTTP/3 is the newest iteration of the HTTP protocol that improves web security and performance...

MS15-022: Description of the security update for Excel Services in SharePoint Server 2013: March 10, 2015

Describes a security update that addresses vulnerabilities by correcting how SharePoint Server sanitizes specially crafted page content.INTRODUCTIONMicrosoft has released security bulletin MS15-022. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

MS15-081: Description of the security update for Word 2016: October 13, 2015

Resolves vulnerabilities in Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file.SummaryThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office...

Description of the Microsoft Office for Mac 2011 14.0.1 Update

Microsoft has released security bulletin MS10-087. This security bulletin contains all the relevant information about the security updates for Microsoft Office for Mac 2011 applications.INTRODUCTIONMicrosoft has released security bulletin MS10-087. This security bulletin contains all the relevant...

Anti-malware platform update for Windows Defender is available in Windows 8

Anti-malware platform update for Windows Defender is available in Windows 8 Introduction This article describes an anti-malware platform update for Windows Defender that is available in Windows 8. This anti-malware platform update for Windows Defender updates Windows Defender services, drivers, a...