Lucene search
+L

1756 matches found

CNVD
CNVD
added 2022/06/28 12:0 a.m.40 views

IBM Planning Analytics and Cognos Analytics跨站脚本漏洞

IBM Cognos Analytics and IBM Planning Analytics are both products of IBM Corporation, a U.S. company. IBM Planning Analytics is a business planning analytics solution that supports the automation of business planning, budgeting and analysis processes. IBM Planning Analytics and Cognos Analytics h...

6.1CVSS2AI score0.0085EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/24 4:15 p.m.31 views

CVE-2021-39047

IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

6.1CVSS0.0085EPSS
SaveExploits0References4
OSV
OSV
added 2022/06/24 4:15 p.m.5 views

CVE-2021-39047

IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

6.1CVSS6.5AI score0.0085EPSS
SaveExploits0References4
Prion
Prion
added 2022/06/24 4:15 p.m.17 views

Cross site scripting

IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

4.3CVSS6.7AI score0.0085EPSS
SaveExploits0References4Affected Software2
CVE
CVE
added 2022/06/24 3:35 p.m.92 views

CVE-2021-39047

CVE-2021-39047 affects IBM Planning Analytics 2.0 and IBM Cognos Analytics (11.1.x–11.2.x). The issue is a cross-site scripting (XSS) vulnerability in the Web UI that could let an attacker embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Remediat...

6.1CVSS5.9AI score0.0085EPSS
SaveExploits0References4Affected Software2
Cvelist
Cvelist
added 2022/06/24 3:35 p.m.30 views

CVE-2021-39047

IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

6.1CVSS5.9AI score0.0085EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/06/24 12:0 a.m.8 views

PT-2022-10865 · Ibm · Ibm Cognos Analytics +1

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics version 2.0 IBM Cognos Analytics versions 11.1.7 through 11.2.1 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to...

6.1CVSS6.4AI score0.0085EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/06/24 12:0 a.m.7 views

IBM多款产品 跨站脚本漏洞

IBM Cognos Analytics and IBM Planning Analytics are both products of IBM Corporation, a U.S. company. IBM Planning Analytics is a business planning analytics solution that supports the automation of business planning, budgeting and analysis processes. IBM Planning Analytics and Cognos Analytics h...

6.1CVSS5.5AI score0.0085EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/06/22 12:0 a.m.4 views

CVE-2021-39047

IBM Planning Analytics 2.0 and IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

6.1CVSS6.6AI score0.0085EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/06/20 8:16 p.m.9 views

MAL-2022-674 Malicious code in @twitch-easymode/capacity-planning (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6116e10cfec8b81c5e691cdc536246d0b4ae6b9571361abff6d0562172b05c14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/17 1:15 p.m.2 views

DEBIAN-CVE-2021-41490

Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...

7.5CVSS7.4AI score0.0097EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/17 1:15 p.m.41 views

UBUNTU-CVE-2021-41490

Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior...

7.5CVSS5.8AI score0.0097EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/17 12:0 a.m.6 views

OMPL 安全漏洞

OMPL is an open source motion planning library from OMPL. A security vulnerability exists in OMPL v1.5.0, which stems from a memory leak in LazyPRM.cpp...

7.5CVSS7.2AI score0.0097EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/06/15 12:0 a.m.10 views

The vulnerability of the User Interface sub-component of the Oracle Collaborative Planning component of the Oracle E-Business Suite allows a perpetrator to access and modify data.

The vulnerability of the User Interface sub-component of the Oracle Collaborative Planning product, a business automation system within the Oracle E-Business Suite, exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to...

8.5CVSS7.7AI score0.00987EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.5 views

多款SAP产品安全漏洞

SAP ERP and others are products of SAP, a German company.SAP ERP is a series of software for ERP management.SAP Financials is a financial system.SAP S/4Hana Core is a complete and modular cloud ERP software.SAP ERP, SAP Financials, and SAP S/4Hana Core are products of SAP, a German company. A...

6.5CVSS6.7AI score0.00623EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/06/13 12:0 a.m.5 views

OTRS 安全漏洞

OTRS is an application from the German company OTRS. A service management software. A security vulnerability exists in OTRS versions 8.0.x through 8.0.23 and OTRS versions 7.0.x through 7.0.35, as well as OTRSCalendarResourcePlanning versions 8.0.x through 8.0.23 and 7.0.x through 7.0.31, which...

5.3CVSS5.7AI score0.00733EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/06/13 12:0 a.m.8 views

FacturaScripts 跨站脚本漏洞

FacturaScripts is an ERP software. A cross-site scripting vulnerability exists in FacturaScripts versions prior to 2022.06, which can be exploited by an attacker to execute JavaScript code on the client side...

7.1CVSS5.6AI score0.00907EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/08 12:0 a.m.6 views

Dolibarr 跨站脚本漏洞

Dolibarr is an ERP/CRM system with plug-and-play modules and a well-established ecosystem with customizations and service providers worldwide. version 12.0.5 of Dolibarr suffers from a cross-site scripting vulnerability that can be exploited by attackers to cause cross-site scripting XSS attacks...

6.1CVSS5.2AI score0.00657EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/06/01 12:0 a.m.4 views

Avantune Genialcloud ProJ 跨站脚本漏洞

Avantune Genialcloud ProJ is a cloud-based ERP platform from Avantune Canada. version 10 of Avantune Genialcloud ProJ is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to inject and execute arbitrary web scripts or HTML via a crafted payload...

6.1CVSS5.5AI score0.02363EPSS
SaveExploits3References7
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:0 a.m.8 views

The vulnerability of the Microsoft Dynamics 365 resource planning software server allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software server relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

9CVSS8.3AI score0.02776EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder