CVE-2014-6487

CVE-2014-6487 is an unspecified vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware versions 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2. The flaw is described as allowing remote authenticated users to affect integrity via unknown vectors related to End User Self Ser...

PT-2014-7249

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.5 through 11.1.2.2 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to End User Self Service in the Oracle Identit...

CVE-2014-6487: Undefined Security Weakness

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service...

CVE-2014-0940

Multiple cross-site scripting XSS vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 REST API or 2 Self Service UI...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 REST API or 2 Self Service UI...

CVE-2014-0940

Multiple cross-site scripting XSS vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 REST API or 2 Self Service UI...

CVE-2014-0940: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 REST API or 2 Self Service UI...

PT-2014-3958

Name of the Vulnerable Software and Affected Versions IBM Tivoli Service Automation Manager version 7.2.2.2 Description The issue involves multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. This can be achieved through vectors...

CVE-2014-5176

CVE-2014-5176 concerns SAP FI Manager Self-Service, where a hard-coded user name creates a potential backdoor that could allow remote attackers to gain access via unspecified vectors. The underlying issue is the presence of a fixed credential within the affected component, which reduces defense-i...

PT-2014-6315

Name of the Vulnerable Software and Affected Versions SAP FI Manager Self-Service affected versions not specified Description The issue concerns a hard-coded user name in SAP FI Manager Self-Service, making it easier for remote attackers to gain access through unspecified vectors. Recommendations...

CVE-2014-5176: Undefined Security Weakness

SAP FI Manager Self-Service has a hard-coded user name, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2014-2429

Unspecified vulnerability in the PeopleSoft Enterprise CS Campus Self Service component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Campus Mobile...

CVE-2014-2429

Unspecified vulnerability in the PeopleSoft Enterprise CS Campus Self Service component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Campus Mobile...

CVE-2014-2429

Technical details for CVE-2014-2429 are not publicly available in the provided documents. Monitor for updates from official advisories; current sources summarize the vulnerability only at a high level without specifics.

CVE-2014-2429: Undefined Security Weakness

Unspecified vulnerability in the PeopleSoft Enterprise CS Campus Self Service component in Oracle PeopleSoft Products 9.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Campus Mobile...

PT-2014-4691

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Products version 9.0 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to Campus Mobile in the PeopleSoft Enterprise CS Campus Self Service component...

Cross site scripting

Cross-site scripting XSS vulnerability in the Self-Service Console in EMC RSA Authentication Manager 7.1 before SP4 P32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" issue...

EMC RSA Authentication Manager crossframe scripting

Self-Service Console cross frame scripting...

CVE-2014-0623: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Self-Service Console in EMC RSA Authentication Manager 7.1 before SP4 P32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" issue...

ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability

ESA-2014-015.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-015: RSA® Authentication Manager Cross Frame Scripting Vulnerability EMC Identifier: ESA-2014-015 CVE Identifier: CVE-2014-0623 Severity Rating: CVSS v2 Base Score: 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N Affected Products: RSA...