asean-sourcing.com XSS vulnerability

Vulnerable URL: http://www.asean-sourcing.com/news.php?news=prompt'OPENBUGBOUNTY'...

IBM Emptoris Sourcing Open Redirect Vulnerability

IBM Emptoris Sourcing is a source-to-contract solution from IBM USA. The solution helps organizations get affordable prices and greater value from suppliers by examining factors such as cost, risk and performance in sourcing decisions. An open redirection vulnerability exists in IBM Emptoris...

CVE-2015-7786

Cross-site scripting XSS vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09 for Web Analytics Service allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09 for Web Analytics Service allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-7786

CVE-2015-7786: Cross-site scripting in the NTT DATA Smart Sourcing JavaScript module used by Web Analytics Service (distributed 2003-11-26 to 2013-07-09). The vulnerability allows an attacker to inject arbitrary script/HTML via unspecified vectors. Affected component is the Web Analytics Service ...

CVE-2015-7786

Cross-site scripting XSS vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09 for Web Analytics Service allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

JVN#70083512: Web Analytics Service vulnerable to cross-site scripting

The JavaScript module for using Web Analytics Service which was provided by NTT DATA Smart Sourcing Corporation contains a cross-site scripting vulnerability CWE-79 due to a flaw in escaping process. According to the developer, this script was distributed from 26 November, 2003 to 9 July, 2013...

CVE-2015-5024

IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allows remote authenticated users to obtain sensitive supplier-bid information via unspecified vectors...

Code injection

IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allows remote authenticated users to obtain sensitive supplier-bid information via unspecified vectors...

CVE-2015-5024

IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allows remote authenticated users to obtain sensitive supplier-bid information via unspecified vectors...

CVE-2015-5024

IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allows remote authenticated users to obtain sensitive supplier-bid information via unspecified vectors...

CVE-2015-5024

The CVE-2015-5024 entry concerns IBM Emptoris Sourcing, affecting multiple 10.0.x releases (e.g., 10.0.2.0, 10.0.2.2, 10.0.2.3, 10.0.2.5–10.0.2.7, and 10.0.4.x) with remote authenticated access that can disclose sensitive supplier-bid information via unspecified vectors. The underlying cause is a...

The vulnerability of the Oracle E-Business Suite system for automating business processes allows a perpetrator to breach data confidentiality.

The vulnerability of the Oracle Sourcing component of the Oracle E-Business Suite automation system is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data confidentiality...

Unspecified Vulnerability in Oracle E-Business Oracle Sourcing Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. A security vulnerability exists in the Oracle E-Business Suite Oracle Sourcing component that can be exploited by remote attackers to compromise system confidentiality...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Sourcing component in Oracle E-Business Suite 12.1.1, 12.1.2, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Bid/Quote creation...

Oracle E-Business Multiple Vulnerabilities (July 2015 CPU)

The version of Oracle E-Business installed on the remote host is missing the July 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by affected by vulnerabilities in the following components : - Oracle Application Object Library CVE-2015-2618 - Oracle Application Object Library...

Unspecified Vulnerability in PeopleSoft Enterprise SCM Strategic Sourcing Component in Oracle PeopleSoft

Oracle PeopleSoft is a suite of enterprise human capital management solutions, and PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that transforms the way organizations manage, use and maintain their PeopleSoft software. An unspecified security vulnerabili...

CVE-2015-0485

Unspecified vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...

CVE-2015-0485

CVE-2015-0485 affects Oracle PeopleSoft Products 9.1 and 9.2 in the PeopleSoft Enterprise SCM Strategic Sourcing component. The vulnerability is described as an unspecified security issue that allows remote authenticated users to affect confidentiality via unknown vectors. The connected documents...

Xxe

The Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10.0.0.1 iFix12, 10.0.1.x before 10.0.1.5 iFix2, and 10.0.2.x before 10.0.2.2 iFix5; Emptoris Sourcing 9.5 before 9.5.1.3 iFix2, 10.0.0.x before 10.0.0.1 iFix1, 10.0.1.x before 10.0.1.3 iFix1, and 10.0.2...