521 matches found
CVE-2022-29613
SAP Employee Self Service is affected by an input validation flaw that allows an authenticated user to change an employee number, enabling viewing of other users’ personal details and resulting in limited confidentiality impact. The root cause cited across sources is insufficient input validation...
CVE-2022-29613
Due to insufficient input validation, SAP Employee Self Service allows an authenticated attacker with user privileges to alter employee number. On successful exploitation, the attacker can view personal details of other users causing a limited impact on confidentiality of the application...
SAP Employee Self Service 输入验证错误漏洞
SAP Employee Self Service is an employee self-service platform from SAP Germany. An input validation error vulnerability exists in SAP Employee Self Service, which can be exploited by an attacker to disclose information...
Access to internal files through ownCloud Android App - ownCloud
An attacker wich local access to a device with the ownCloud Android app could access internal files of the app...
SAP Solution Manager has an unspecified vulnerability
SAP Solution Manager is a system management platform from SAP Germany that integrates system monitoring, SAP support desktops, self-service, ASAP implementation, etc. SAP Solution Manager has a security vulnerability that can be exploited by attackers to compromise vulnerable systems, including...
Unable to start self-service on RHEL with CWA for Linux 21.x
This article is intended for Citrix administrators and technical teams only. The self-servicerun using CWA Linux 21.x in distributions like RHEL 7.x and CentOS 7.x will fail with ‘CXXABI1.3.8’ not found and ‘GLIBCXX3.4.20’ not found...
ZOHO ManageEngine ADSelfService Plus 信息泄露漏洞
A security vulnerability exists in ZOHO ManageEngine ADSelfService Plus, ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. The vulnerability stems from build 6116 of ManageEngine ADSelfService Plus containing an observable...
MVP Health Care secures member portal access with Microsoft Azure Active Directory B2C
Hello! I’m Sue Bohn, Microsoft Vice President of Program Management for Identity and Network Access. In today’s Voice of the Customer blog post, Chief Technology Officer and Chief Information Security Officer David Swits of MVP Health Care shares how Microsoft Azure Active Directory B2C helped th...
MVP Health Care secures member portal access with Microsoft Azure Active Directory B2C
Hello! I’m Sue Bohn, Microsoft Vice President of Program Management for Identity and Network Access. In today’s Voice of the Customer blog post, Chief Technology Officer and Chief Information Security Officer David Swits of MVP Health Care shares how Microsoft Azure Active Directory B2C helped th...
Zoho ManageEngine ADSelfService Plus Email Spoofing Vulnerability
Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. An email spoofing vulnerability exists in Zoho ManageEngine...
ZOHO ManageEngine ADSelfService Plus 安全漏洞
ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. versions have a security vulnerability that stems from the vulnerability of the system to takeover by linked applications. Detailed...
Security Bulletin: IBM Security Identity Manager deprecated Self Service UI contains Struts V1 (CVE-2016-1182)
Summary IBM Security Identity Manager made code changes to remove the deprecated function and its related Struts V1 code library. Vulnerability Details CVEID: CVE-2016-1182 DESCRIPTION: Apache Struts could allow a remote attacker to bypass security restrictions, caused by the failure to properly...
Zoho ManageEngine ADSelfService Plus 跨站脚本漏洞
Zoho ManageEngine ADSelfService Plus is a web-based self-service application that enables end-users to perform tasks such as password reset, account unlocking, profile information update, etc. without relying on the help desk. A reflected cross-site scripting vulnerability exists in the...
Security Bulletin: Vulnerability in self-service console affects IBM Cloud Pak System (CVE-2021-20478)
Summary Vulnerability in self-sevice console affects IBM Cloud Pak System. IBM Cloud Pak System has addressed this vulnerability. Vulnerability Details CVEID: CVE-2021-20478 DESCRIPTION: IBM Cloud Pak System could allow a local user in some situations to view the artifacts of another user in self...
How to Customize App Shortcuts with Receiver for Windows
As a Receiver administrator, you can configure Receiver for Windows 4.2.100 to automatically place application and desktop shortcuts directly in the Start menu or on the desktop in a similar way that Receiver for Windows 3.4 Enterprise places them. The new shortcut only mode provides a seamless...
Virtuozzo Hybrid Infrastructure 4.6 Update 1
This update provides new features, as well as bug fixes and improvements. Vulnerability id: VSTOR-45315 The MDS service may be unstable under a high load condition. Vulnerability id: VSTOR-43126 A deadlock is possible between atomic and non-atomic commands in the iSCSI kernel module. Vulnerabilit...
Unspecified Vulnerability in IBM Cloud Pak System (CNVD-2021-52957)
IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from IBM USA. The product supports deploying, managing and moving application environments across hybrid clouds. A security vulnerability exists in IBM Cloud Pak System that allows a local us...
CVE-2021-20478
IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self service console. IBM X-Force ID: 197497...
