CVE-2018-17168

PrinterOn Enterprise 4.1.4 is affected by multiple cross-site request forgery (CSRF) vulnerabilities in the Administration page. An attacker could lure an administrator to a link that triggers unauthorized admin actions, such as Disable or Approve printer settings. The root cause is CSRF in the a...

CVE-2018-17168

PrinterOn Enterprise 4.1.4 contains multiple Cross Site Request Forgery CSRF vulnerabilities in the Administration page. For example, an administrator, by following a link, can be tricked into making unwanted changes to a printer Disable, Approve, etc...

PT-2019-9450

Name of the Vulnerable Software and Affected Versions Kofax Front Office Server version 4.1.1.11.0.5212 Description The issue concerns multiple authenticated stored XSS vulnerabilities. These can be exploited via the "Filename" field in the "/Kofax/KFS/ThinClient/document/upload/" endpoint for th...

PT-2019-9451

Name of the Vulnerable Software and Affected Versions Kofax Front Office Server Administration Console version 4.1.1.11.0.5212 Description A vulnerability exists that allows remote authenticated users to read arbitrary files. This is achieved by crafting XML inside an imported package configurati...

PT-2019-9401

Name of the Vulnerable Software and Affected Versions PrinterOn Enterprise version 4.1.4 Description The issue allows an attacker to trick an administrator into making unwanted changes to a printer, such as disabling or approving it, by following a malicious link. This is due to multiple Cross Si...

CVE-2018-17288: Improper Neutralization of Input During Web Page Generation

Kofax Front Office Server version 4.1.1.11.0.5212 both Thin Client and Administration Console suffers from multiple authenticated stored XSS vulnerabilities via the 1 "Filename" field in /Kofax/KFS/ThinClient/document/upload/ - Thin Client or 2 "DeviceName" field in...

CVE-2018-17168: Cross-Site Request Forgery (CSRF)

PrinterOn Enterprise 4.1.4 contains multiple Cross Site Request Forgery CSRF vulnerabilities in the Administration page. For example, an administrator, by following a link, can be tricked into making unwanted changes to a printer Disable, Approve, etc...

CVE-2018-17287: Missing Encryption of Sensitive Data

In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value can be exfiltrated by using the back-end "download" feature, as demonstrated by an mfp.password downloadsettingvalue operation...

PT-2019-9449

Name of the Vulnerable Software and Affected Versions Kofax Front Office Server Administration Console version 4.1.1.11.0.5212 Description The issue allows for the exfiltration of sensitive information, such as passwords, which are obfuscated in the front-end but can be accessed in cleartext...

CVE-2018-17289: Improper Restriction of XML External Entity Reference

An XML external entity XXE vulnerability in Kofax Front Office Server Administration Console version 4.1.1.11.0.5212 allows remote authenticated users to read arbitrary files via crafted XML inside an imported package configuration .ZIP file within the Kofax/KFS/Admin/PackageService/package/uploa...

Oracle Marketing Component Access Control Error Vulnerability (CNVD-2019-29196)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the Internet-based marketing...

Oracle Marketing Component Access Control Error Vulnerability (CNVD-2019-29190)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the...

Oracle Marketing Component Access Control Error Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the...

Oracle Marketing Component Access Control Error Vulnerability (CNVD-2019-29195)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the Internet-based marketing...

Oracle Marketing Component Access Control Error Vulnerability (CNVD-2019-29194)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the Internet-based marketing...

PT-2019-1943

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to insufficient access control in the Oracle Marketing component, specifically the Marketing Administratio...

PT-2019-1883

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.2.8 Description The issue is related to inadequate access control in the Marketing Administration component of Oracle Marketing, part of the Oracle E-Business Suite system. This can be exploit...

PT-2019-1885

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.8 Description The issue is related to inadequate access control in the Oracle Marketing component, specifically the Marketing...

PT-2019-1879

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8 Description The issue is related to inadequate access control in the Oracle Marketing component, specifically the Marketing Administration...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in ESXi, Workstation, and Fusion. An attacker could exploit some of these vulnerabilities to obtain sensitive information. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review VMware...