327 matches found
Apache OFBiz 代码问题漏洞
Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A code issue vulnerability exists in Apache OFBiz versions prior to 17.12.07 that stems from insecure...
Watch Out! Mission Critical SAP Applications Are Under Active Attack
Cyber attackers are actively setting their sights on unsecured SAP applications in an attempt to steal information and sabotage critical processes, according to new research. "Observed exploitation could lead in many cases to full control of the unsecured SAP application, bypassing common securit...
The vulnerability of the Apache OFBiz resource planning software lies in its ability to restore unreliable data in memory, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Apache OFBiz’s resource planning software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Critical RCE Vulnerability Found in Apache OFBiz ERP Software—Patch Now
The Apache Software Foundation on Friday addressed a high severity vulnerability in Apache OFBiz that could have allowed an unauthenticated adversary to remotely seize control of the open-source enterprise resource planning ERP system. Tracked as CVE-2021-26295, the flaw affects all versions of t...
Security Bulletin: Vulnerability in IBM Java Runtime Environment affects installation and uninstallation of IBM Spectrum Protect for Enterprise Resource Planning on AIX and Linux (CVE-2020-27221)
Summary A vulnerability in IBM Java Runtime Environment may affect the installation and uninstallation of IBM Spectrum Protect for Enterprise Resource Planning ERP on AIX and Linux. This issue was disclosed as part of the IBM Java SDK updates in January 2021. UPDATED: 18 March 2021 - Corrected...
MSPs, have you picked the right PSA for you yet?
Not long ago, we helped MSPs pick the right remote monitoring and management RMM platform for them, and make it an essential part of their service toolkit. As you may recall, an RMM is a tool that helps MSPs do the work. And what better way to track the work—and other elements associated with...
Dolibarr ERP/CRM 参数注入漏洞
Dolibarr ERP/CRM is an open source software/freeware for small and medium-sized businesses, organizations or freelancers. It includes different features such as Enterprise Resource Planning ERP and Customer Relationship Management CRM, as well as applications for other different activities. A...
The vulnerability of the SAP ERP HCM workforce management software lies in the lack of authentication, which allows attackers to elevate their privileges.
The vulnerability of the SAP ERP HCM workforce management software is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
SAP ERP and SAP S/4 HANA Authorization Issues Vulnerability (CNVD-2021-03707)
SAP S/4 HANA and SAP ERP are both products of SAP, an intelligent, integrated ERP software for large organizations.SAP ERP is a family of software for ERP management. An authorization issue vulnerability exists in SAP ERP and SAP S/4 HANA that allows an authenticated attacker to view the cost...
The software for resource planning in Microsoft Dynamics 365 is vulnerable due to the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out XSS attacks.
The vulnerability of the Microsoft Dynamics 365 resource planning software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a specially created link...
File upload vulnerability in Billing Master Aj***.cl***.php file
Billing Master is a real estate agent ERP management system. A file upload vulnerability exists in the Billing Master Aj.cl.php file. An attacker can exploit this vulnerability to gain server privileges...
SAP ERP Client E-Bilanz Access Control Error Vulnerability
SAP ERP is a series of software for ERP management from SAP in Germany. An Access Control Error vulnerability exists in SAP ERP Client E-Bilanz version 1.0, which stems from an installation setting incorrectly setting the default file system permissions in its installation folder, allowing anyone...
The vulnerability of the Dynamics server software for resource planning in Microsoft Dynamics 365 allows a perpetrator to carry out a cross-site scripting attack.
The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Dynamics server software for resource planning in Microsoft Dynamics 365 allows a perpetrator to carry out a cross-site scripting attack.
The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Dynamics server software for resource planning in Microsoft Dynamics 365 allows a hacker to execute arbitrary code.
The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Dynamics server software for resource planning in Microsoft Dynamics 365 allows a hacker to execute arbitrary code.
The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Dynamics server software for resource planning in Microsoft Dynamics 365 allows a perpetrator to carry out a cross-site scripting attack.
The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Dynamics server software for resource planning in Microsoft Dynamics 365 allows a perpetrator to carry out a cross-site scripting attack.
The vulnerability of the Dynamics resource planning software for Microsoft Dynamics 365 relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
SQL Injection Vulnerability in Co***.htm Page of Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.
Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. Ltd. home decoration ERP management system Co.htm page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...
The vulnerability of the Microsoft Dynamics 365 resource planning software server allows attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft Dynamics 365 resource planning software server is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by using specially crafted requests...