CVE-2024-42564

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/inventory/delete?action=delete...

PT-2024-30025 · Erp · Erp

Name of the Vulnerable Software and Affected Versions: ERP version 44bd04 Description: A SQL injection issue was discovered via the id parameter at the "/index.php/basedata/contact/delete?action=delete" endpoint. This allows for potential exploitation. Recommendations: For ERP version 44bd04,...

Exploit for Incorrect Authorization in Apache Ofbiz

CVE-2024-38856-ApacheOfBiz Apache OFBiz is an open source...

Security Bulletin: IBM Planning Analytics is affected by vulnerabilities in IBM Java and IBM Websphere Application Server Liberty

Summary There are vulnerabilities in IBM® Java™ Version 8 and IBM WebSphere Application Server Liberty used by both IBM Planning Analytics and IBM Planning Analytics Workspace. With respect to IBM Planning Analytics, applicable CVEs have been addressed by upgrading to non-vulnerable versions of...

The vulnerability of the Dynamics 365 Field Service application for resource planning in Microsoft Dynamics 365 allows a malicious individual to escalate their privileges.

The vulnerability of the Dynamics 365 Field Service application for resource planning in Microsoft Dynamics 365 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

Apache OFBiz Authorization Error Vulnerability

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. An authorization error vulnerability exists in Apache OFBiz versions 18.12.14 and earlier, which could be...

IBM Planning Analytics Local Authentication Error Vulnerability

IBM Planning Analytics Local is a web-based local architecture from International Business Machines IBM. An authentication error vulnerability exists in IBM Planning Analytics Local versions 2.0 and 2.1 that originates from a connection to a MongoDB server that does not require password...

The vulnerability of the Override View function in the Apache OFBiz resource planning software allows a hacker to execute arbitrary code.

The vulnerability of the Override View function in the Apache OFBiz enterprise resource planning software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted requests remotely...

Apache OFBiz 安全漏洞

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. An authorization error vulnerability exists in Apache OFBiz versions 18.12.14 and earlier, which could be...

CVE-2024-35143

IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM...

CVE-2024-35143

IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM...

CVE-2024-35143 IBM Planning Analytics Local missing authentication

IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM...

CVE-2024-35143 IBM Planning Analytics Local missing authentication

IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM...

CVE-2024-35143

CVE-2024-35143 concerns IBM Planning Analytics Local (2.0, 2.1) that connects to a MongoDB server which is exposed to remote access with no password authentication. The root cause is unauthenticated MongoDB connections enabled by the product’s configuration, allowing a remote attacker to gain una...

PT-2024-26336 · Mongodb +1 · Mongodb +1

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics Local versions 2.0 through 2.1 Description: The issue concerns a lack of password authentication in MongoDB connections, allowing a remote attacker to gain unauthorized access to the database. This could potentially lea...

BM SOFT BMPlanning 安全漏洞

BM SOFT BMPlanning is a powerful resource planning tool from the French company BM SOFT. A security vulnerability exists in BM SOFT BMPlanning version 1.0.0.1, which originates from the presence of a SQL injection vulnerability that allows an authenticated user to execute arbitrary SQL commands...

Matrix Tafnit 安全漏洞

Matrix Tafnit is an enterprise resource planning solution from Matrix. A security vulnerability exists in Matrix Tafnit version v8 that stems from observable response differences...

The vulnerability of the on-premise resource planning software of Microsoft Dynamics 365, related to incorrect authorization, allows a perpetrator to disclose protected information.

The vulnerability of the on-premise resource planning software for Microsoft Dynamics 365 is related to improper authorization. Exploitation of this vulnerability can allow an attacker, operating remotely, to disclose sensitive information...

CVE-2024-39595

SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user-controlled inputs, resulting in Stored Cross-Site Scripting XSS vulnerability. This vulnerability allows users to modify website content and on successful exploitation, an attacker can cause lo...

CVE-2024-39594

SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can cause low impact on the confidentiality and integrity of the...