51 matches found
TIBCO WebFOCUS 跨站脚本漏洞
TIBCO WebFOCUS is an enterprise business intelligence and analytics solution from TIBCO USA. Equipped with data management, visual discovery, predictive analytics and powerful visualization capabilities. A security vulnerability exists in TIBCO WebFOCUS Client that allows a low-privileged attacke...
CVE-2021-35493: Improper Neutralization of Input During Web Page Generation
The WebFOCUS Reporting Server and WebFOCUS Client components of TIBCO Software Inc.'s TIBCO WebFOCUS Client, TIBCO WebFOCUS Installer, and TIBCO WebFOCUS Reporting Server contain easily exploitable Stored and Reflected Cross Site Scripting XSS vulnerabilities that allow a low privileged attacker ...
Information Builders WebFOCUS Business Intelligence XML External Entity Injection Vulnerability
Information Builders WebFOCUS Business Intelligence BI is a suite of business intelligence and analytics platforms from Information Builders, Inc. in the United States. The platform provides data analysis tools, applications, reporting and document generation. Information Builders WebFOCUS Busine...
Information Builders WebFOCUS Business Intelligence Cross-Site Scripting Vulnerability
Information Builders WebFOCUS Business Intelligence BI is a suite of business intelligence and analytics platforms from Information Builders, Inc. in the United States. The platform provides data analysis tools, applications, reporting and document generation. A cross-site scripting vulnerability...
Information Builders WebFOCUS Business Intelligence Cross-Site Request Forgery Vulnerability
Information Builders WebFOCUS Business Intelligence BI is a suite of business intelligence and analytics platforms from Information Builders, Inc. in the United States. The platform provides data analysis tools, applications, reporting and document generation. Information Builders WebFOCUS Busine...
CVE-2020-14203
WebFOCUS Business Intelligence 8.0 SP6 allows a Cross-Site Request Forgery CSRF attack against administrative users within the /ibiapps/WFServlet.ibfs endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044...
CVE-2020-14204
In WebFOCUS Business Intelligence 8.0 SP6, the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibiapps/WFServlet.cfg because XML external entity injection is possible. This is related to making changes t...
CVE-2020-14202
WebFOCUS Business Intelligence 8.0 SP6 was prone to XSS via arbitrary URL parameters...
CVE-2020-14202
WebFOCUS Business Intelligence 8.0 SP6 was prone to XSS via arbitrary URL parameters...
CVE-2020-14204
In WebFOCUS Business Intelligence 8.0 SP6, the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibiapps/WFServlet.cfg because XML external entity injection is possible. This is related to making changes t...
CVE-2020-14203
WebFOCUS Business Intelligence 8.0 SP6 allows a Cross-Site Request Forgery CSRF attack against administrative users within the /ibiapps/WFServlet.ibfs endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044...
Xxe
In WebFOCUS Business Intelligence 8.0 SP6, the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibiapps/WFServlet.cfg because XML external entity injection is possible. This is related to making changes t...
Design/Logic Flaw
WebFOCUS Business Intelligence 8.0 SP6 was prone to XSS via arbitrary URL parameters...
CVE-2020-14202
WebFOCUS Business Intelligence 8.0 (SP6) is affected by CVE-2020-14202: an XSS vulnerability via arbitrary URL parameters in WebFOCUS BI. The root cause is insufficient input sanitization/cleanup, allowing script execution in the context of the affected site. Impact is cross-site scripting; no ex...
CVE-2020-14202
WebFOCUS Business Intelligence 8.0 SP6 was prone to XSS via arbitrary URL parameters...
CVE-2020-14204
CVE-2020-14204 affects WebFOCUS Business Intelligence 8.0 (SP6). The vulnerability is XML External Entity Injection in the WebFOCUS BI XML processing, enabling remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibi_apps/WFServlet.cfg. ...
CVE-2020-14203
WebFOCUS Business Intelligence 8.0 (SP6) is affected by CVE-2020-14203, a Cross-Site Request Forgery (CSRF) vulnerability in the /ibi_apps/WFServlet(.ibfs) endpoint. The issue can enable creation of an administrative user and is connected to CVE-2016-9044. Multiple connected sources confirm a CSR...
CVE-2020-14203
WebFOCUS Business Intelligence 8.0 SP6 allows a Cross-Site Request Forgery CSRF attack against administrative users within the /ibiapps/WFServlet.ibfs endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044...
CVE-2020-14204: Improper Restriction of XML External Entity Reference
In WebFOCUS Business Intelligence 8.0 SP6, the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibiapps/WFServlet.cfg because XML external entity injection is possible. This is related to making changes t...