CVE-2020-4562

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window communication with unrestricted target origin via documentation frames...

Design/Logic Flaw

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window communication with unrestricted target origin via documentation frames...

CVE-2020-4562

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window communication with unrestricted target origin via documentation frames...

CVE-2020-4562

Summary: CVE-2020-4562 affects IBM Planning Analytics 2.0 (Local) in the Planning Analytics Workspace component. A vulnerability allows a remote attacker to obtain sensitive information via cross-window communication with an unrestricted target origin in documentation frames. The root cause is an...

IBM Planning Analytics Access Control Error Vulnerability

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. An Access Control Error vulnerability exists in IBM Planning Analytics, which could be exploited b...

Security Bulletin: IBM Planning Analytics Workspace is affected by a security vulnerability

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by a vulnerability. This has been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 63. Vulnerability Details CVEID: CVE-2020-4562 DESCRIPTION: IBM Planning Analytics could...

IBM Planning Analytics 信息泄露漏洞

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. An Access Control Error vulnerability exists in IBM Planning Analytics, which could be exploited b...

CVE-2021-2253

Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain component: Core. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Supply Cha...

CVE-2021-2253

Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain component: Core. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Supply Cha...

CVE-2021-2253

Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain component: Core. Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Supply Cha...

CVE-2021-2253

CVE-2021-2253 affects Oracle Advanced Supply Chain Planning (Oracle Supply Chain) Core in versions 12.1 and 12.2. The vulnerability arises in the core component, enabling an unauthenticated attacker to compromise via HTTP over network access, potentially leading to unauthorized creation, deletion...

Henan Tongchuang Enterprise Management Consulting Co., Ltd. station building system has information leakage vulnerability

Henan Tongchuang Enterprise Management Consulting Co., Ltd. was founded on May 04, 2015 Business scope includes enterprise management consulting services; corporate image planning services. Henan Tongchuang enterprise management consulting limited company station building system there is...

Oracle Advanced Supply Chain Planning 输入验证错误漏洞

Oracle Advanced Supply Chain Planning is an application from Oracle Corporation. It provides a comprehensive, Internet-based planning solution that determines when and where supplies are deployed in an extended supply chain. An input validation error vulnerability exists in Oracle Advanced Supply...

Watch Out! Mission Critical SAP Applications Are Under Active Attack

Cyber attackers are actively setting their sights on unsecured SAP applications in an attempt to steal information and sabotage critical processes, according to new research. "Observed exploitation could lead in many cases to full control of the unsecured SAP application, bypassing common securit...

The vulnerability of the Apache OFBiz resource planning software lies in its ability to restore unreliable data in memory, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Apache OFBiz’s resource planning software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the online service for managing enterprise assets and planning resources in resource-intensive industries like Ellipse EAM stems from the lack of measures taken to protect the website structure. This allows attackers to carry out attacks using cross-site scripting.

The vulnerability of the online service for managing enterprise assets and planning resources in resource-intensive industries exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to carry out attacks using cross-site...

IBM Planning Analytics Server-Side Request Forgery Vulnerability

IBM Planning Analytics is a planning, budgeting, forecasting and analytics solution. A server-side request forgery vulnerability exists in IBM Planning Analytics 2.0. An attacker could exploit this vulnerability by making arbitrary requests to the internal network or local file system from a...

CVE-2020-4882

IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery SSRF attack by constucting URLs from user-controlled data . This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 190852...

CVE-2020-4882

IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery SSRF attack by constucting URLs from user-controlled data . This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 190852...

Server side request forgery (ssrf)

IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery SSRF attack by constucting URLs from user-controlled data . This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 190852...