Code injection

The self-service application in Cisco Unified Communications Domain Manager CUCDM 10.61 allows remote authenticated users to cause a denial of service subapplication outage via malformed requests, aka Bug ID CSCuu10981...

Cisco Unified Communications Domain Manager Denial of Service Vulnerability

A vulnerability in Cisco Unified Communications Domain Manager CUCDM could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of malformed requests by the self-service application on an affected CUCDM device. An...

Lepide Active Directory Self Service Elevation of Privilege Vulnerability

Lepide Active Directory Self Service is a password self-service solution. A security vulnerability exists in the processing of the password reset feature of Lepide Active Directory Self Service. The vulnerability can be exploited by a domain user to change the password of any user within an Activ...

Report: German Bank ATMs vulnerable to Hackers

Avoiding Credit Card Fraud is simply easy as long as you use cash. But, what if you even get hacked while withdrawing cash from an ATM? If you are living in Germany or traveling there, then think twice before using your payment cards in the ATMs. Here’s why: A Security researcher in Germany has...

Slow App Enumeration in StoreFront 3.0 with Receiver 4.3

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information App enumeration takes up to 4 mins. You can expedite the app enumeration by restarting the self service...

Universal Password Login Vulnerability in NatShell Blue Ocean Premier User Self-Service System

Blue Ocean Premier Broadband Access Gateway is a specialized intelligent device for Ethernet broadband access. A universal password login vulnerability exists in the NatShell Blue Ocean Excellence User Self-Service System, which can be exploited by an attacker to login to the system and view...

Majority of 4G USB Modems, SIM Cards Exploitable

Researchers say 4G USB modems contain exploitable vulnerabilities through which attackers could, and researchers have, managed to gain full control of the machines to which the devices are connected. Researchers from Positive Technologies presented a briefing detailing how to compromise USB modem...

CVE-2014-6140

IBM Tivoli Endpoint Manager Mobile Device Management MDM before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitrary code via crafted marshalled Ruby objects in cookies to 1 Enrollment and Apple iOS Management...

Code injection

IBM Tivoli Endpoint Manager Mobile Device Management MDM before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitrary code via crafted marshalled Ruby objects in cookies to 1 Enrollment and Apple iOS Management...

Oracle Identity Manager (October 2014 CPU

The remote host is missing the October 2014 Critical Patch Update for Oracle Identity Manager. It is, therefore, affected by multiple vulnerabilities : - The application is affected by a vulnerability in Apache Commons BeanUtils in which ClassLoader objects can be set via the class attribute of a...

CVE-2014-6487

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service...

CVE-2014-6487

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service...

CVE-2014-6487

CVE-2014-6487 is an unspecified vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware versions 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2. The flaw is described as allowing remote authenticated users to affect integrity via unknown vectors related to End User Self Ser...

CVE-2014-0940

Multiple cross-site scripting XSS vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 REST API or 2 Self Service UI...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 REST API or 2 Self Service UI...

CVE-2014-0940

Multiple cross-site scripting XSS vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 REST API or 2 Self Service UI...

CVE-2014-5176

CVE-2014-5176 concerns SAP FI Manager Self-Service, where a hard-coded user name creates a potential backdoor that could allow remote attackers to gain access via unspecified vectors. The underlying issue is the presence of a fixed credential within the affected component, which reduces defense-i...

CVE-2014-2429

Unspecified vulnerability in the PeopleSoft Enterprise CS Campus Self Service component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Campus Mobile...

CVE-2014-2429

Technical details for CVE-2014-2429 are not publicly available in the provided documents. Monitor for updates from official advisories; current sources summarize the vulnerability only at a high level without specifics.