1756 matches found
The vulnerability of the SAP ERP HCM workforce management software is caused by deficiencies in the authorization process, which allows unauthorized users to increase their privileges.
The vulnerability of the SAP ERP HCM workforce management software is due to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
CVE-2020-6188
VAT Pro-Rata reports in SAP ERP SAPAPPL versions 600, 602, 603, 604, 605, 606, 616 and SAPFIN versions 617, 618, 700, 720, 730 and SAP S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user leading to Missing Authorization Check...
Security Bulletin: IBM Planning Analytics has addressed a Security Vulnerability
Summary This Security Bulletin addresses a security vulnerability that has been remediated in IBM Planning Analytics 2.0.9. Vulnerability Details CVEID: CVE-2019-4716 DESCRIPTION: IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as...
Apache OFBiz Unauthorized Access Vulnerability
Apache OFBiz is the United States Apache Apache Software Foundation of a set of enterprise resource planning ERP system. The system provides a complete set of Java-based Web application components and tools. An unauthorized access vulnerability exists in Apache OFBiz, which could be exploited by ...
actionplanning.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1086338 Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting actionplanning.co.uk website...
IBM Planning Analytics Cross-Site Request Forgery Vulnerability
IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. IBM Planning Analytics suffers from a cross-site request forgery vulnerability that can be exploit...
CVE-2019-4613
IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 168524...
CVE-2019-4613
IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 168524...
Cross site request forgery (csrf)
IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 168524...
CVE-2019-4613
IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 168524...
CVE-2019-4613
CVE-2019-4613 concerns a Cross-Site Request Forgery (CSRF) vulnerability in IBM Planning Analytics 2.0. The IBM Planning Analytics Planning Analytics Workspace component is implicated, enabling an attacker to cause malicious, unauthorized actions transmitted from a trusted user’s session. The iss...
Security Bulletin: IBM Planning Analytics Local is affected by a security vulnerability
Summary The Planning Analytics Workspace component of IBM Planning Analytics is impacted by a Cross-Site Request Forgery XSRF vulnerability . This vulnerability has been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 48. Vulnerability Details CVEID:...
The vulnerability of SAP ERP Sales and S4HANA Sales resource planning software lies in the lack of an authentication mechanism, which allows attackers to increase their privileges.
The vulnerability of SAP ERP Sales and S4HANA Sales resource planning software lies in the lack of an authentication mechanism. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...
The vulnerability of the Microsoft Dynamics resource planning software relates to insufficient protection of the website structure, allowing attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft Dynamics resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by using specially crafted requests...
Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2020-04021)
Oracle E-Business Suite is in the original Application ERP based on the expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on a variety of management software collection, is seamlessly integrated with a management...
SOPlanning SQL Injection Vulnerability
SOPlanning is an online planning tool. A SQL injection vulnerability exists in SOPlanning version 1.45. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to execute illegal SQL commands...
CVE-2019-20179
SOPlanning 1.45 has SQL injection via the userlist.php "by" parameter...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Cognos Planning
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition Version 7 that is used by IBM Cognos Planning. These issues were disclosed as part of the IBM Java SDK updates in October 2018, January 2019, April 2019, July 2019 and October 2019. Vulnerability Detai...