PT-2018-10528

Name of the Vulnerable Software and Affected Versions Moodle versions 3.x Description An issue was discovered that allows users to instantiate any class by substituting URLs in portfolios. This can be exploited by users who are logged in as guests to create a DDoS attack. Recommendations For Mood...

Oracle Financial Services Applications Financial Services Basel Regulatory Capital Basic Component Unauthorized Operation Vulnerability (CNVD-2018-10744)

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation that combines core banking, online banking, and estate management.Financial Services Basel Regulatory Capital Basic is one of the Basel-based capital adequacy management component. A security...

Oracle Financial Services Applications Financial Services Basel Regulatory Capital Basic Component Unauthorized Operation Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation that combines core banking, online banking, and estate management.Financial Services Basel Regulatory Capital Basic is one of the Basel-based capital adequacy management component. A security...

Oracle Financial Services Applications Financial Services Basel Regulatory Capital Internal Ratings Based Approach Component Unauthorized Operation Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Financial Services Basel Regulatory Capital Internal Ratings Based Approach is one of the components of the Basel Regulatory Capital...

Oracle Financial Services Applications Financial Services Basel Regulatory Capital Internal Ratings Based Approach component unauthorized operation vulnerability (CNVD-2018-11043 )

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Financial Services Basel Regulatory Capital Internal Ratings Based Approach is one of the components of the Basel Regulatory Capital...

gaf-portfolio.ch XSS vulnerability

Open Bug Bounty ID: OBB-608358 Description| Value ---|--- Affected Website:| gaf-portfolio.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-15862

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 16.2 and 17.1 through 17.12 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management,...

CVE-2018-2849: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2855: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Basel Regulatory Capital Basic component of Oracle Financial Services Applications subcomponent: Portfolio, Attribution. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2856: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach component of Oracle Financial Services Applications subcomponent: Portfolio, Attribution. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged...

CVE-2018-2854: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Basel Regulatory Capital Basic component of Oracle Financial Services Applications subcomponent: Portfolio, Attribution. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2859: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach component of Oracle Financial Services Applications subcomponent: Portfolio, Attribution. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticate...

Micro Focus Project and Portfolio Management Center XML External Entity Injection Vulnerability

Micro Focus Project and Portfolio Management Center is a suite of project portfolio management software from Micro Focus UK. The software manages hybrid projects by integrating agile tools such as ALM Octane, Agile Manager and CA Rally. An XML external entity injection vulnerability exists in Mic...

XXE Zeroday Vulnerability in HP PPM

Intro: XXE Zeroday Vulnerability in HP PPM Researchers at Rhino Security Labs discovered an XXE vulnerability in the way HP Project and Portfolio Management Center HP PPM processed imported tickets. Specifically, an XML external entity injection vulnerability allows an attacker to exploit the...

Xxe

XML External Entity XXE vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability can be exploited to allow XML External Entity XXE...

CVE-2018-6489

XML External Entity XXE vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability can be exploited to allow XML External Entity XXE...

CVE-2018-6489

CVE-2018-6489 is an XML External Entity (XXE) injection in Micro Focus Project and Portfolio Management Center, version 9.32. The root cause is XXE processing in the affected XML handling, enabling attacker-controlled entity parsing that could lead to information disclosure, with CVSS3 base score...

CVE-2018-6489

XML External Entity XXE vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability can be exploited to allow XML External Entity XXE...

CVE-2018-6489: Improper Restriction of XML External Entity Reference

XML External Entity XXE vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability can be exploited to allow XML External Entity XXE...

PT-2018-17580

Name of the Vulnerable Software and Affected Versions Micro Focus Project and Portfolio Management Center version 9.32 Description The issue is related to an XML External Entity XXE vulnerability, which can be exploited to allow XXE. Recommendations For version 9.32, update to a version that...