ThreatList: Half of Execs Feel Unprepared to Respond to a Cyber-Incident

Nearly half 46 percent of executives in a Deloitte poll say their organizations have experienced a cybersecurity incident over the past year — and that they’re still no closer to being ready for the next event. The survey, of more than 3,150 professionals taken during a Deloitte Dbriefs webcast o...

SAP ERP HCM SAP Fiori Cross-Site Request Forgery Vulnerability

SAP ERP HCM is a set of enterprise human resource management solutions from SAP, Germany, of which SAP Fiori is a product front-end development framework. A cross-site request forgery vulnerability exists in SAP Fiori version 1.0 for SAP ERP HCM, which arises from an application that fails to...

SAP Business Planning and Consolidation XNL External Entity Injection Vulnerability

SAP Business Planning and Consolidation BPC is a suite of business planning and consolidation software from SAP. The software provides planning, budgeting and financial integration functions. An XNL external entity injection vulnerability exists in the reporting functionality in SAP BPC, which ca...

Security Bulletin: IBM Cognos Planning is affected by multiple vulnerabilities.

Summary This bulletin addresses several security vulnerabilities that are fixed in IBM Cognos Planning. IBM Cognos Planning consumes OpenSSL. Multiple vulnerabilities have been addressed in OpenSSL. There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition Version 7...

Security Bulletins - IBM Planning Analytics, Cognos TM1 and Cognos Insight

Problem IBM Planning Analytics and Cognos TM1 Security Bulletins and Alerts. Resolving The Problem Tab navigation PA 2.0.x TM1 10.2.x Insight 10.2.x Concert 4.0.2 Security bulletins and Alerts for IBM Planning Analytics 2.0.x. --- Published / Updated | Title July 2018 | Security Bulletin: Multipl...

How to Solve the Developer vs. Cybersecurity Team Battle

There is an ongoing tension between developers and security teams in many organizations. On one hand, developers face mounting pressure to build rich, feature-driven applications on nearly impossible timelines to remain competitive. On the other hand, security teams face rising pressures of their...

IBM Planning Analytics Cross-Site Scripting Vulnerability

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A cross-site scripting vulnerability exists in IBM Planning Analytics versions 2.0.0 through 2.0.4...

UBUNTU-CVE-2018-13450

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...

CVE-2018-1676

IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 14511...

CVE-2018-1676

IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 14511...

Cross site scripting

IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 14511...

CVE-2018-1676

IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 14511...

CVE-2018-1676

Summary of the CVE and context : The vulnerability CVE-2018-1676 affects IBM Planning Analytics Local 2.0.0 through 2.0.4. Multiple connected sources confirm a cross-site scripting (XSS) vulnerability in the Web UI that could allow injection of arbitrary JavaScript and potentially lead to credent...

Security Bulletin: A security vulnerability has been identified in IBM Cognos Business Intelligence shipped with IBM Cognos Planning (CVE-2016-5388).

Summary IBM Cognos Business Intelligence is shipped with IBM Cognos Planning. Information about a security vulnerability affecting IBM Cognos Business Intelligence has been published in a security bulletin. Vulnerability Details Refer to the security bulletin listed in the Remediation/Fixes...

Security Bulletin: Security vulnerabilities have been identified in IBM Cognos Planning.

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 and IBM® Runtime Environment Java™ Technology Edition, Version 7 that are used by IBM Cognos Planning. These issues were disclosed as part of the IBM Java SDK updates in October 2016, Januar...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Planning Analytics Local

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7. These issues were disclosed as part of the IBM Java SDK updates in January 2017. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product, you should evaluate...

Security Bulletin: Vulnerabilities in OpenSSL have been identified in IBM Cognos Business Intelligence shipped with IBM Cognos Planning (CVE-2016-7055, CVE-2017-3730, CVE-2017-3731, CVE-2017-3732).

Summary OpenSSL vulnerabilities were disclosed on January 26, 2017 by the OpenSSL Project. OpenSSL is used by IBM Cognos Business Intelligence which is shipped with IBM Cognos Planning. Vulnerability Details Refer to the security bulletin listed in the Remediation/Fixes section Affected Products...

Security Bulletin: Vulnerabilities in OpenSSL have been identified in IBM Cognos Business Intelligence shipped with IBM Cognos Planning.

Summary OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL is used by IBM Cognos Business Intelligence which is shipped with IBM Cognos Planning. Vulnerability Details Refer to the security bulletin listed in the Remediation/Fixes section Affected...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Cognos Planning (CVE-2016-0466, CVE-2016-0448)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 that is used by IBM Cognos Planning. These issues were disclosed as part of the IBM Java SDK updates in January 2016. Vulnerability Details CVEID: CVE-2016-0466 DESCRIPTION: An unspecified...

Security Bulletin: An unspecified vulnerability related to the Security component in IBM Java Runtime affects IBM Cognos Planning (CVE-2015-4872)

Summary There is a vulnerability in IBM® Runtime Environment Java™ Technology Edition, Version 6 SR16 FP7 that is used by IBM Cognos Planning. This issue was disclosed as part of the IBM Java SDK updates for October 2015 Vulnerability Details CVEID: CVE-2015-4872 DESCRIPTION: An unspecified...