Oracle Installed Base 安全漏洞

Oracle Installed Base is a project lifecycle management application from Oracle Corporation Oracle. It provides enterprise-wide internal lifecycle project management and tracking capabilities. A security vulnerability exists in the APIs component of Oracle Installed Base version 12.1.3. An attack...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability in Oracle Service Contracts...

Oracle Hyperion 输入验证错误漏洞

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closure, report creation, and other functions. An input validation error vulnerability exists in Hyperion Analytic Provider Services JAPI 11.1.2.4, 12.2.1.4, which...

Oracle Applications Framework 安全漏洞

Oracle E-Business Suite is in the original Application ERP based on the expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on a variety of management software collection, is seamlessly integrated with a management...

Oracle Storage Cloud Software Appliance 安全漏洞

Oracle Storage Cloud Software Appliance is an application from Oracle Corporation, USA. It provides a storage function A security vulnerability exists in Oracle Storage Cloud Software Appliance Management Console Prior to 16.3.1.4.2 that could allow an unauthenticated attacker to compromise the...

Oracle Quoting 安全漏洞

Oracle Quoting is an application from Oracle Corporation, USA. An automated sales quote generation application that creates and manages customer quotes easily, consistently, and securely across all customer interaction channels, such as field sales, telesales, e-commerce, and business partners. A...

Oracle Cloud Infrastructure Storage Gateway 安全漏洞

Oracle Cloud Infrastructure Storage Gateway is an application gateway from Oracle Corporation in the United States. A security vulnerability in Oracle Cloud Infrastructure Storage Gateway Management Console Prior to 1.4 allows a highly privileged attacker accessed over an HTTP network to compromi...

Oracle Hospitality Reporting and Analytics 输入验证错误漏洞

Oracle Hospitality Reporting and Analytics is a suite of platforms for hotels used by Oracle Corporation USA for generating reports for analyzing operational data. Oracle Hospitality Inventory Management Export to Reporting and Analytics 9.1.0 suffers from an input validation error vulnerability...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability in Oracle HRMS France French...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability in Oracle E-Business Suite's...

Oracle Fusion Middleware 输入验证错误漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collections, and other capabilities. Oracle Fusion Middleware Oracle Platform Security for Java OPSS...

Oracle Hyperion Financial Management 安全漏洞

Oracle Hyperion Financial Management is a comprehensive Web-based application that provides global financial consolidation, reporting, and analysis capabilities through a highly scalable software solution. A security vulnerability exists in the Task Automation component of Oracle Hyperion Financi...

Attackers Target ProxyLogon Exploit to Install Cryptojacker

Cryptojacking can be added to the list of threats that face any unpatched Exchange servers that remain vulnerable to the now-infamous ProxyLogon exploit, new research has found. Researchers discovered the threat actors using Exchange servers compromised using the highly publicized exploit...

CVE-2021-22991

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclosed requests to a virtual server may be incorrectly handled by the Traffic Management Microkernel TMM URI normalization, which may trigger a buffer...

CVE-2021-27436

WebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an attacker to send malicious JavaScript code to an unsuspecting user, which could result in hijacking of the user’s cookie/session tokens, redirecting the user to a malicious webpage and performing...

CVE-2021-3339

ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen...

4sight ModernFlow Authorization Issues Vulnerability

4sight ModernFlow is a mobile app from 4sight, Inc. that provides an app to easily manage business processes within an organization. An authorization issue vulnerability exists in ModernFlow. The vulnerability stems from the system not restricting web access to members of the security group as...

Star Computer Star Practice Management Web Access Control Error Vulnerability (CNVD-2021-56826)

Star Computer Star Practice Management Web is a web service from Star Computer UK that applies billing based on time.An access control error vulnerability exists in Star Practice Management Web version 2019.2.0.6, which could be exploited by an unauthorized The vulnerability can be exploited by a...

Star Computer Star Practice Management Web Access Control Error Vulnerability (CNVD-2021-56825)

Star Computer Star Practice Management Web is a web service applied to billing based on time by Star Computer UK.An access control error vulnerability exists in Star Practice Management Web version 2019.2.0.6, which could be exploited by an unauthorized The vulnerability can be exploited by an...

Oracle JD Edwards EnterpriseOne Orchestrator Information Disclosure Vulnerability

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle Corporation that provides application modules for financial management, project management, and asset lifecycle management. An information disclosure vulnerability exists in the E1...