CVE-2012-1731

Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI...

CVE-2012-1731

Oracle Siebel CRM 8.1.1 and 8.2.2 contain a Web UI vulnerability (CVE-2012-1731) in the UI Framework/Web UI. The issue allows difficult-to-exploit, unauthenticated network access via HTTP that can lead to unauthorized updates/inserts/deletes, data exposure, and partial denial of service. The vuln...

PT-2012-3483

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 through 8.2.2 Description The issue affects the confidentiality, integrity, and availability of the system. It can be exploited by remote attackers via unknown vectors related to the Web UI. Recommendations For...

CVE-2012-1731: Undefined Security Weakness

Unspecified vulnerability in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web UI...

Code injection

Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-1674...

Code injection

Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-0582...

CVE-2012-0582

Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-1674...

CVE-2012-1674

Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-0582...

CVE-2012-1674

The CVE-2012-1674 entry concerns the Siebel Clinical component of Oracle Industry Applications (versions 7.7, 7.8, 8.0.0.x, 8.1.1.x, 8.2.2.x). The vulnerability is described as an unspecified issue that allows remote authenticated users to affect integrity via Web UI, with vectors not disclosed i...

CVE-2012-0582

Oracle Siebel CRM: The Siebel Clinical component of Oracle Industry Applications (versions 7.7, 7.8, 8.0.0.x, 8.1.1.x, 8.2.2.x) contains an unspecified vulnerability in the Web UI that allows remote authenticated attackers to impact data integrity via an authenticated network attack over HTTP. Th...

PT-2012-2690

Name of the Vulnerable Software and Affected Versions Oracle Industry Applications versions 7.7 through 8.2.2.x Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to the Web UI. Recommendations For versions 7.7...

PT-2012-3434

Name of the Vulnerable Software and Affected Versions Oracle Industry Applications versions 7.7 through 8.2.2.x Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to the Web UI. Recommendations For Oracle Indust...

CVE-2012-1674: Undefined Security Weakness

Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-0582...

CVE-2012-0582: Undefined Security Weakness

Unspecified vulnerability in the Siebel Clinical component in Oracle Industry Applications 7.7, 7.8, 8.0.0.x, 8.1.1.x, and 8.2.2.x allows remote authenticated users to affect integrity via unknown vectors related to Web UI, a different vulnerability than CVE-2012-1674...

Metasploit 4.1.0 Web UI stored XSS vulnerability

Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability Advisory ID: SSCHADV2011-033 Author: Stefan Schurtz Affected Software: Successfully tested on Metasploit Community Edition Vendor URL: http://metasploit.com/ Vendor Status: fixed EDB-ID: 18012 ========================== Vulnerability...

Metasploit 4.1.0 Web UI Cross Site Scripting vulnerability

Metasploit 4.1.0 Web UI Cross Site Scripting vulnerability The Web UI in Metasploit version 4.1.0 suffers from a stored cross site scripting vulnerability discovered by "Stefan Schurtz ". Technical Details Login to Web UI - Create New Project - Project name - '"alertdocument.cookie...

Metasploit 4.1.0 Web UI Cross Site Scripting vulnerability

Metasploit 4.1.0 Web UI Cross Site Scripting vulnerability The Web UI in Metasploit version 4.1.0 suffers from a stored cross site scripting vulnerability discovered by "Stefan Schurtz". Technical Details Login to Web UI - Create New Project - Project name -...

Metasploit 4.1.0 Web UI - Persistent Cross-Site Scripting

Metasploit 4.1.0 Web UI - Persistent Cross-Site Scripting Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability Advisory ID: SSCHADV2011-033 Author: Stefan Schurtz Affected Software: Successfully tested on Metasploit Community Edition Vendor URL: http://metasploit.com/ Vendor Status: informe...

Metasploit Web UI 4.1.0 - Persistent Cross-Site Scripting

Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability Advisory ID: SSCHADV2011-033 Author: Stefan Schurtz Affected Software: Successfully tested on Metasploit Community Edition Vendor URL: http://metasploit.com/ Vendor Status: informed ========================== Vulnerability Description:...

Metasploit 4.1.0 Web UI Cross Site Scripting

Advisory: Metasploit 4.1.0 Web UI stored XSS vulnerability Advisory ID: SSCHADV2011-033 Author: Stefan Schurtz Affected Software: Successfully tested on Metasploit Community Edition Vendor URL: http://metasploit.com/ Vendor Status: informed ========================== Vulnerability Description:...