Security Bulletin: Cross-Site Scripting (XSS) and Remote Code Execution Vulnerabilities Affecting Asset and Service Management (CVE-2015-0104, CVE-2015-0107, CVE-2015-0108, CVE-2015-0109)

Summary There are cross-site scripting and remove code execution vulnerabilities in code that is used by Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry Solutions including Maximo for Government, Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life...

Security Bulletin: GSKit TLS Padding Vulnerability affects IBM Tivoli/Security Server on Asset and Service Management (CVE-2014-8730)

Summary IBM Tivoli/Security Directory Server ITDS/ISDS are affected by a TLS padding vulnerability, which could allow a remote attacker to obtain sensitive information. Vulnerability Details CVE-ID: CVE-2014-8730 DESCRIPTION: IBM Security Directory Server could allow a remote attacker to obtain...

Security Bulletin: Information Disclosure Vulnerability Addressed in Asset and Service Management (CVE-2014-4765)

Summary IBM Maximo Asset Management could allow an attacker to obtain directory information from an error message. This information could be used to aid in further attacks against the system. Vulnerability Details DESCRIPTION: Customers who have Maximo Asset Management, Maximo Asset Management...

Security Bulletin: Security Bypass Vulnerability Addressed in Asset and Service Management (CVE-2014-3084)

Summary IBM Maximo Asset Management allows an authenticated attacker to modify calendar entries that they do not have access to by bypassing security restrictions. Vulnerability Details DESCRIPTION: Customers who have Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry...

Security Bulletin: Security Vulnerabilities Addressed in Asset and Service Mgmt

Summary HTTP Response Splitting, Information Disclosure, SQL Injection, Security Bypass, Inadequate/Poor Input Control, Cross Site Scripting, and Gain Privileges vulnerabilities in Maximo Asset Mgmt, Tivoli Asset Mgmt for IT, Tivoli Service Request Mgr, Change and Configuration Mgmt Database, and...

Potential Security Vulnerabilities With JavaTM SDKs

Abstract Security Bulletin: Asset and Service Mgmt Products - Potential security exposure when using JavaTM based applications due to vulnerabilities in Java Software Developer Kits. See Vulnerability Details for CVE IDs. Content Content VULNERABILITY DETAILS: CVE ID: CVE-2011-3563, CVE-2011-5035...

Security Vulnerabilities Addressed in Asset and Service Mgmt

Abstract Security Bulletin: Security vulnerabilities in Maximo Asset Mgmt, Tivoli Asset Mgmt for IT, Tivoli Service Request Manager, Change and Configuration Mgmt Database. See Vulnerability Details for CVE IDs Content VULNERABILITY DETAILS: CVE ID: CVE-2011-1394, CVE-2011-1395, CVE-2011-1396,...

Security Bulletin: IBM® DB2® LUW contains a vulnerability in which an ALTER TABLE statement may cause the DB2 server to terminate abnormally when AUTO_REVAL is set to IMMEDIATE . (CVE-2014-6159)

Summary IBM DB2 contains a vulnerability in which an ALTER TABLE statement may cause the DB2 server to terminate abnormally when AUTOREVAL is set to IMMEDIATE . This could result in a DB2 server crash; if so, the server would need to be restarted. Vulnerability Details CVE ID: CVE-2014-6159...

The vulnerability of Qualcomm Service Request in the Android operating system, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm Service Request component in the Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Information Disclosure Vulnerability in Multiple IBM Products (CNVD-2018-08000)

IBM Maximo Asset Management and others are products of IBM Corporation in the U.S. Maximo Asset Management and Maximo Asset Management Essentials are comprehensive asset lifecycle and maintenance management solutions.Tivoli Service Tivoli Service Request Manager is an IT service management...

CVE-2017-10174

CVE-2017-10174 concerns a vulnerability in the Oracle iSupport component of Oracle E-Business Suite (Service Request subcomponent). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.6. The issue allows an unauthenticated attacker with network access via HTTP to compromise iSupport, wi...

CVE-2017-10174: Undefined Security Weakness

Vulnerability in the Oracle iSupport component of Oracle E-Business Suite subcomponent: Service Request. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTT...

Oracle iSupport Remote Vulnerability (CNVD-2017-27238)

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the e-business management components...

Oracle iSupport Remote Vulnerability

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the e-business management components...

CVE-2016-5414

FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services...

Subaru car software vulnerability analysis—never a failure of token-vulnerability warning-the black bar safety net

Not long ago, one from California car, information security researcher Aaron Guzman, in Australia, held a computer security conference to introduce a black into the Subaru car of the method. In his own 2017 Subaru WRX STI was found in a surprising number of software vulnerabilities, through these...

Oracle Automatic Service Request Unauthorized Access Vulnerability

Oracle Automatic Service Request, which can quickly save the system state when there is a hardware problem, has the ability to safely speed up the diagnostic process, automatic service request generation, and prioritized service request processing. A local security vulnerability exists in the 'AS...

Oracle Automatic Service Request Local Vulnerability (CNVD-2017-08119)

Oracle Automatic Service Request is the ability to quickly save the system state when hardware problems occur, with features such as a secure and accelerated diagnostic process, automatic service request generation, and prioritized service request processing. A local security vulnerability exists...

Oracle Automatic Service Request Local Vulnerability (CNVD-2017-08075)

Oracle Automatic Service Request is the ability to quickly save the system state when hardware problems occur, with features such as a secure and accelerated diagnostic process, automatic service request generation, and prioritized service request processing. A local security vulnerability exists...

Oracle Automatic Service Request Local Vulnerability (CNVD-2017-08118)

Oracle Automatic Service Request is the ability to quickly save the system state when hardware problems occur, with features such as a secure and accelerated diagnostic process, automatic service request generation, and prioritized service request processing. A local security vulnerability exists...