Security Bulletin: FileNet Workplace can be affected by the Open Redirection Vulnerability (CVE-2016-3047)

Summary FileNet Workplace is susceptible to the Open Redirection Vulnerability. Vulnerability Details Relevant CVE Information: CVEID: CVE-2016-3047 DESCRIPTION: IBM FileNet Workplace could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim ...

Security Bulletin: Vulnerability in Flexera InstallShield affects FileNet Application Engine, FileNet Integration for Microsoft Office, and FileNet Workplace XT (CVE-2016-2542)

Summary InstallShield generates installation executable files, which are vulnerable to a DLL-planting vulnerability. Vulnerability Details CVEID: CVE-2016-2542 DESCRIPTION: Flexera InstallShield can allow a local attacker to gain elevated privileges on the system, caused by an untrusted search...

Securing the modern workplace with Microsoft 365 threat protection – part 3

This post is authored by Debraj Ghosh, Senior Product Marketing Manager, Microsoft 365 Security. Detecting ransomware in the modern workplace Over the last two weeks, we have shared with you the roots of Microsoft 365 threat protection and how Microsoft 365 threat protect helps protect the modern...

Securing the modern workplace with Microsoft 365 threat protection – part 1

This post is authored by Debraj Ghosh, Senior Product Marketing Manager, Microsoft 365 Security. The roots of Microsoft 365 threat protection Over the next few weeks, well introduce you to Microsoft 365s threat protection services and demonstrate how Microsoft 365s threat protection leverages...

International Women’s Day: Women in tech share their stories

From the metoo movement to Oprah's Time's Up speech to the women's marches on cities throughout the world—it's been a banner year for women's rights. And on this International Women's Day, we wanted to do more than pay lip service to the changes in feminist dialogue. After all, tech is an industr...

Authentication flaw

SafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

CVE-2015-7961

SafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

CVE-2015-7961

Technical details about CVE-2015-7961 are not provided in the connected documents; the Initial Description mentions privilege escalation from weak ACLs but provides no product/version specifics. Monitor for updates.

workplaceexpress.com.au XSS vulnerability

Vulnerable URL: https://www.workplaceexpress.com.au/search.php?pagesize=20⊂search=9=1=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

Cybersecurity in the Workplace is Everybody’s Business

What can individual users do to preserve cybersecurity at work? Your organization is spending on cybersecurity tools, you have an awareness program, and if you look you will find that there are standards and procedures for choosing and maintaining products to help keep information secure. But wha...

Cybersecurity in the Workplace is Everyone’s Business

October is National Cybersecurity Awareness Month, an annual campaign to raise awareness about cybersecurity. Creating a culture of cybersecurity is critical for all organizations—large and small businesses, academic institutions, non-profits, and government agencies—and is a responsibility share...

A week in security (September 4 – September 10)

Last week, we looked into expired domain names being used for malvertising, delved into dubious Facebook apps, and checked out Chinese seminar scams. We also explained the whys and wherefores of false positives, explained what Google is doing with HTTPs, warned you away from a fake DHS email, and...

European Companies Must Tell Employees If Their Work Emails Are Being Monitored

Finally, European companies must inform employees in advance if their work email accounts are being monitored. The European Court of Human Rights ECHR on Tuesday gave a landmark judgement concerning privacy in the workplace by overturning an earlier ruling that gave employers the right to spy on...

workplace.thecsicompanies.com XSS vulnerability

Vulnerable URL: http://workplace.thecsicompanies.com/workplace/Central/Login.aspx?Message="'--!=Your+session+has+timed+out%2C+please+login. Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

CVE-2016-8921

IBM FileNet WorkPlace XT could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server...

CVE-2016-8921

IBM FileNet WorkPlace XT could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server...

Code injection

IBM FileNet WorkPlace XT could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server...

CVE-2016-8921

CVE-2016-8921 concerns IBM FileNet Workplace XT (v1.1.5) where a remote attacker can upload arbitrary files due to a file extension validation bypass. The IBM Security Bulletin details that the vulnerability enables uploading malicious content to the FileNet P8 server, potentially leading to code...

IBM FileNet Workplace XT Arbitrary File Upload Vulnerability

IBM FileNet is a suite of enterprise content management platforms from IBM in the U.S. IBM FileNet Workplace XT is one of the client Web applications that provides access to document management and business process management. An arbitrary file upload vulnerability exists in IBM FileNet Workplace...

CVE-2016-3055

IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...