Bitrix24 Code Issue Vulnerability

Bitrix24 is a suite of enterprise social platforms from Bitrix USA. The platform includes features such as online communication, calendar management and CRM Customer Relationship Management. A code issue vulnerability exists in Bitrix24 version 20.0.975 and prior versions. The vulnerability stems...

The vulnerability of the Microsoft Dynamics 365 customer relationship management system, related to the lack of measures taken to protect the website structure, allows a hacker to perform a cross-site scripting attack.

The vulnerability of the Microsoft Dynamics 365 customer relationship management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Preferences sub-component of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite allows a perpetrator to gain access to and modify data.

The vulnerability of the Preferences sub-component of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite system relates to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to read,...

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module. The Oracle E-Business Suite technical foundation for automating business processes, allowing attackers to access, modify, add, or delete data.

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...

Multiple SQL Injection Vulnerabilities in SuiteCRM

SuiteCRM is a free and open source customer relationship management application. Multiple SQL injection vulnerabilities exist in SuiteCRM. An attacker could exploit to obtain sensitive information...

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2020-04015)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on a variety of management software collection, is a seamless integration of a management suite. Oracle...

The vulnerability of the SAP Supplier Relationship Management procurement automation application, related to errors in the encoding of user-input data, allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the SAP Supplier Relationship Management procurement automation application is related to errors in the encoding of user-input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

SAP Supplier Relationship Management Cross-Site Scripting Vulnerability (CNVD-2020-04284)

SAP Supplier Relationship Management SRM is a supplier relationship management solution from SAP. The product automates purchasing and acquisition processes within an organization and between suppliers, and provides functions such as invoicing. A cross-site scripting vulnerability exists in SAP S...

CVE-2019-19306

The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or LayoutName...

The vulnerability of the Access and Security sub-component of the Hyperion Data Relationship Management application, which is used for data management in the Oracle Hyperion business environment, allows a perpetrator to cause a service failure, execute arbitrary code, or gain unauthorized access to protected information.

The vulnerability of the Access and Security sub-component of the Hyperion Data Relationship Management component of the Oracle Hyperion application for business data management is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service...

Dolibarr ERP/CRM Injection Vulnerability

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. An injection vulnerability exists in Dolibarr ERP/CRM version...

CVE-2019-2927

Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion component: Access and Security. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Data...

Design/Logic Flaw

Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion component: Access and Security. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Data...

CVE-2019-2927

Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion component: Access and Security. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Data...

CVE-2019-2927

CVE-2019-2927 concerns Oracle Hyperion Data Relationship Management (component: Access and Security). Affected product/version: Hyperion DRM 11.1.2.4. The issue is exploitable over HTTP with network access by a high-privilege attacker; user interaction is required for successful exploitation and ...

CVE-2019-2927

Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion component: Access and Security. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Data...

Unspecified Vulnerability in Oracle Hyperion Hyperion Data Relationship Management Component (CNVD-2019-38820)

Oracle Hyperion is a set of financial modeling applications from Oracle Corporation. The software provides financial closure, report production and other functions.Hyperion Data Relationship Management is one of the data relationship management components. An unspecified vulnerability exists in t...

Oracle Hyperion Data Relationship Management CVE-2019-2927 Remote Security Vulnerability

Description Oracle Hyperion Data Relationship Management is prone to a remote security vulnerability. The vulnerability can be exploited over HTTP protocol. This issue affects the 'Access and Security' component. This vulnerability affects the following supported versions: 11.1.2.4 Technologies...

EspoCRM Trust Management Issue Vulnerabilities

EspoCRM is an open source web-based customer relationship management CRM system. The system provides features such as sales automation, community and customer support. EspoCRM is vulnerable to a trust management issue. An attacker can exploit this vulnerability to brute-force break a user's...

Oracle Siebel CRM Siebel Core - Server Framework Component Access Control Error Vulnerability

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions. The program includes sales management, marketing management, customer service systems, call centers and other modules.Siebel Core - Server Framework is one of the Siebel server...