CVE-2025-42982

SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials. This causes high impact on confidentiality, integrity and availability of the application...

CVE-2025-42982

CVE-2025-42982 affects SAP GRC. The vulnerability allows a non-administrative user to access and initiate a transaction that could modify or control transmitted system credentials, with high impact to confidentiality, integrity, and availability. Root cause is insufficient authorization controls ...

CVE-2025-42982 Information Disclosure in SAP GRC (AC Plugin)

SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials. This causes high impact on confidentiality, integrity and availability of the application...

CVE-2025-42982 Information Disclosure in SAP GRC (AC Plugin)

SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials. This causes high impact on confidentiality, integrity and availability of the application...

SAP GRC 安全漏洞

SAP GRC is a suite of solutions and products from SAP, Germany. can help you manage enterprise resources in a way that minimizes risk, builds trust, and reduces compliance costs. A security vulnerability exists in SAP GRC that stems from improper authorization and could result in modification or...

PT-2025-24586 · Sap · Sap Grc

Name of the Vulnerable Software and Affected Versions: SAP GRC affected versions not specified Description: The issue allows a non-administrative user to access and initiate transactions, potentially enabling them to modify or control transmitted system credentials. This poses a high impact on th...

The vulnerability of Ivanti Workspace Control’s software for controlling user access to applications and data, related to the transmission of data in an open manner, allows a hacker to obtain the user’s operating system credentials.

The vulnerability of the software for controlling user access to applications and data in Ivanti Workspace Control is related to the transfer of data in an open manner. Exploiting this vulnerability could allow a hacker to obtain the user’s operating system credentials...

PT-2024-6662 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to the transmission of sensitive information in cleartext, allowing a local authenticated attacker to obtain operating system credentials. This can be...

Ivanti Workspace Control 安全漏洞

Ivanti Workspace Control is an American etc are products of the American Ivanti company.Ivanti Workspace Control is a suite of workspace control software.console etc are open source products.console is an application software.WebSockets ws etc are WebSockets are open source products. ws is a...

CVE-2024-38885

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform unauthorized access using known operating system credentials due to hardcoded SQL user credentials in the client application...

CVE-2024-38877

A vulnerability has been identified in Omnivise T3000 Application Server R9.2 All versions, Omnivise T3000 Domain Controller R9.2 All versions, Omnivise T3000 Network Intrusion Detection System NIDS R9.2 All versions, Omnivise T3000 Product Data Management PDM R9.2 All versions, Omnivise T3000 R8...

CVE-2024-38877

CVE-2024-38877 affects Siemens/Omnivise T3000 components (Application Server, Domain Controller, NIDS, PDM, and related R8.2/R9.2 lines). The root cause is insecure storage of initial system credentials on affected devices, enabling credential retrieval if an attacker gains remote shell or physic...

CVE-2024-38885

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform unauthorized access using known operating system credentials due to hardcoded SQL user credentials in the client application...

Elastic Kibana Log Information Disclosure Vulnerability

Elastic Kibana is an application from the Dutch company Elastic. A free and open user interface that enables you to visualize Elasticsearch data and lets you navigate through the Elastic Stack. A log message disclosure vulnerability exists in Elastic Kibana versions 8.0.0 through 8.11.1, which...

Kibana 8.11.2, 7.17.16 Security Update (ESA-2023-27)

Kibana Insertion of Sensitive Information into Log File ESA-2023-27 An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug level logging is enabled in Kibana. Elastic has released Kibana 8.11.2 which...

CVE-2018-16153

An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations...

CVE-2018-16153

An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations...

Design/Logic Flaw

An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations...

Franklin Fueling System Colibri Path Traversal Vulnerability

Franklin Fueling System Colibri is a fuel system from Franklin Fueling System, Inc. in the United States. The system monitors fuel density and inventory levels. A security vulnerability exists in Franklin Fueling System Colibri that originates from allowing an attacker to access files on the...

SUSE CVE-2023-46671

An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error. Elastic has released Kibana 8.11.1 which resolves this issue. The error message recorded in the log may contain account credentials for the kibanasystem user, API Keys, and...