CVE-2019-2906

CVE-2019-2906 affects Oracle BI Publisher (Mobile Service) in Oracle Fusion Middleware. Affected versions include 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise BI Publisher; successful attacks require user i...

CVE-2019-2906

Vulnerability in the BI Publisher formerly XML Publisher product of Oracle Fusion Middleware component: Mobile Service. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2906

Vulnerability in the BI Publisher formerly XML Publisher product of Oracle Fusion Middleware component: Mobile Service. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2898

Vulnerability in the BI Publisher formerly XML Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2019-2898

Vulnerability in the BI Publisher formerly XML Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2019-2898

Oracle BI Publisher (Fusion Middleware) is affected by CVE-2019-2898 in the BI Publisher Security component. Affected versions: 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. The vulnerability allows a low-privilege attacker with network access via HTTP to read a subset of BI Publisher data. No explicit rem...

Oracle BI Publisher Unauthorized Access Vulnerability

Oracle BI Publisher is a reporting solution that makes it easier and faster than traditional reporting tools to produce, manage and deliver all reports and documents. A security vulnerability exists in the Mobile Service component in Oracle BI Publisher 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. An...

Oracle BI Publisher Unauthorized Access Vulnerability (CNVD-2019-37409)

Oracle BI Publisher is a reporting solution that makes it easier and faster than traditional reporting tools to produce, manage and deliver all reports and documents. A security vulnerability exists in the BI Publisher Security component in Oracle BI Publisher 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. ...

Oracle BI Publisher Multiple Remote Security Vulnerabilities

Description Oracle BI Publisher is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Mobile Service' and 'BI Publisher Security' components are affected. These vulnerabilities affect the following supported versions: 11.1.1.9....

CloudBees Jenkins FTP publisher Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks . FTP publisher Plugin is used in one of...

CloudBees Jenkins HTML Publisher Plugin XSS Injection Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release , test projects and some timed tasks . Dependency Graph Viewer Plugin is used in whi...

Foxit Studio Photo Detection (Windows SMB Login)

Detects the installed version of Foxit Studio Photo for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle October 2019 Critical Patch Update Multiple Vulnerabilities

Description Oracle has released an advance notification regarding the October 2019 Critical Patch Update CPU to be released on October 15, 2019. The update addresses 240 vulnerabilities affecting the following software: Oracle Database Server, versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c Oracl...

Unspecified Vulnerability in CloudBees Jenkins Gem Publisher Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Gem Publisher Plugin is used in which a Gem...

CVE-2019-10432

Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those...

CVE-2019-10432

Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those...

Cross site scripting

Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those...

CVE-2019-10432

Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those...

CVE-2019-10432

Summary (CVE-2019-10432): Jenkins HTML Publisher Plugin (versions

PT-2019-11826 · Jenkins · Jenkins Html Publisher Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins HTML Publisher Plugin versions 1.20 and earlier Description: The issue results from the failure to escape project and build display names in the HTML report frame, leading to a cross-site scripting vulnerability. This vulnerability ca...