EUVD-2015-4010

Malware in sbrugna...

CVE-2021-2140

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Rules Framework. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

Rules Framework component of

The vulnerability of the Rules Framework component of the Oracle Financial Services Analytical Applications Infrastructure software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain read access to data or modify...

CVE-2021-2140

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Rules Framework. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2021-2140

CVE-2021-2140 details (normal mode): Affects Oracle Financial Services Analytical Applications Infrastructure (OFSAI) Rules Framework. Vulnerable versions are 8.0.6–8.1.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise OFSAI Rules Framework, with the attac...

PT-2021-2941

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.6 through 8.1.0 Description The issue is related to insufficient input validation in the Rules Framework component. It allows an unauthenticated attacker with networ...

CVE-2021-2140: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Rules Framework. Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

Unspecified Vulnerability in Oracle Financial Services Analytical Applications Infrastructure

Oracle Financial Services Analytical Applications Infrastructure is the Oracle Financial Services Analytical Applications Infrastructure that powers the Oracle Financial Services Analytical Applications family of products. A security vulnerability exists in the Rules Framework component of Oracle...

Oracle Financial Services Analytical Applications security vulnerabilities

Oracle Financial Services Analytical Applications Infrastructure is the Oracle Financial Services Analytical Applications Infrastructure that powers the Oracle Financial Services Analytical Applications family of products. A security vulnerability exists in the Rules Framework component of Oracle...

SAP CRM Business Rules Framework Arbitrary Code Execution Vulnerability

SAP CRM is a customer relationship management solution. SAP CRM's Business Rules Framework CRM-BF-BRF fails to properly filter user-submitted input, allowing remote attackers to exploit the vulnerability by submitting specially crafted requests to execute arbitrary code...

SAP CRM Business Rules Framework SQL Injection Vulnerability

SAP CRM is a customer relationship management solution. A SQL injection vulnerability exists in SAP CRM's Business Rules Framework CRM-BF-BRF, which allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

CVE-2015-3980

SQL injection vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534...

CVE-2015-3979

Unspecified vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary code via unknown vectors, aka SAP Security Note 2097534...

Security feature bypass

Unspecified vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary code via unknown vectors, aka SAP Security Note 2097534...

Sql injection

SQL injection vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534...

CVE-2015-3980

SQL injection vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534...

CVE-2015-3979

Unspecified vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary code via unknown vectors, aka SAP Security Note 2097534...

PT-2015-6368

Name of the Vulnerable Software and Affected Versions SAP CRM affected versions not specified Description A SQL injection issue in the Business Rules Framework CRM-BF-BRF of SAP CRM allows attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a...

PT-2015-6367

Name of the Vulnerable Software and Affected Versions SAP CRM affected versions not specified Description The issue is related to an unspecified vulnerability in the Business Rules Framework CRM-BF-BRF of SAP CRM, which allows attackers to execute arbitrary code. The exact vectors used for the...

CVE-2015-3980: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534...