CVE-2020-14842: Undefined Security Weakness

Vulnerability in the BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2020-4566

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 Description The issue is related to insufficient input validation in the Mobile Service component of Oracle BI Publisher, allowing an unauthenticated attacker with network access...

The Third Edition of Ross Anderson’s Security Engineering

Ross Andersons fantastic textbook, Security Engineering, will have a third edition. The book wont be published until December, but Ross has been making drafts of the chapters available online as he finishes them. Now that the book is completed, I expect the publisher to make him take the drafts o...

The vulnerability of the Mobile Service component of the Oracle BI Publisher software platform, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Mobile Service sub-component of the BI Publisher software development platform, Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protect...

The vulnerability of the Mobile Service component of the BI Publisher software platform from Oracle Fusion Middleware relates to insufficient validation of input data. This allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Mobile Service component in the BI Publisher reporting tool, a software platform developed by Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool allows a perpetrator to perform a cross-site scripting attack.

The vulnerability of the BI Publisher Security component of the Oracle BI Publisher reporting tool relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Mobile Service component of the Oracle BI Publisher software allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Mobile Service component of the Oracle BI Publisher software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or to modify, add, or delete data...

SMTP password transmitted and displayed in plain text by email-ext

email-ext stores an SMTP password in its global configuration file hudson.plugins.emailext.ExtendedEmailPublisher.xml on the Jenkins controller as part of its configuration. While this password is stored encrypted on disk, it is transmitted and displayed in plain text as part of the configuration...

The vulnerability of the Layout Templates component of the Oracle BI Publisher software allows a malicious individual to gain access to read, modify, add, or delete data.

The vulnerability of the Layout Templates component in the Oracle BI Publisher reporting software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, or delete data using the HTTP protocol...

FlexNet Publisher Information Disclosure Vulnerability

Flexera Software FlexNet Publisher FLEXlm is a software license management core component of the Entitlement Relationship Management Solution from Flexera Software. The product provides software and hardware manufacturers with pricing, packaging and customization of software licensing term...

CVE-2020-12081

An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system...

CVE-2020-12081

An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system...

Information disclosure

An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system...

CVE-2020-12081

CVE-2020-12081 corresponds to an information-disclosure vulnerability in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be abused to access system files or other important files on the host. The connected sources do not provide explicit exploit details (no in-the-wild exploitati...

CVE-2020-12081

An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system...

PT-2020-13032

Name of the Vulnerable Software and Affected Versions FlexNet Publisher lmadmin.exe version 11.14.0.2 Description An information disclosure issue has been identified, allowing access to system files or other important files on the system through the web portal link. Recommendations For version...

CVE-2020-12081: Undefined Security Weakness

An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher Layout Templates Component

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. BI Publisher formerly known as XML Publisher is one of the reporting...

Unauthorized Access Vulnerability in Oracle BI Publisher

Oracle BI Publisher is a reporting solution that makes it easier and faster than traditional reporting tools to produce, manage and deliver all reports and documents. A security vulnerability exists in the BI Publisher Security component in Oracle BI Publisher 12.2.1.3.0, 12.2.1.4.0. An attacker...

Unauthorized Access Vulnerability in Oracle BI Publisher (CNVD-2020-41109)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. BI Publisher formerly known as XML Publisher is one of the reporting...