Announcing the general availability of Azure Defender for IoT

As businesses increasingly rely on connected devices to optimize their operations, the number of IoT and Operational Technology OT endpoints is growing dramatically—industry analysts have estimated that CISOs will soon be responsible for an attack surface multiple times larger than just a few yea...

Infoscience Logstorage and Infoscience ELC Analytics Operating System Command Injection Vulnerability

Infoscience Logstorage and Infoscience ELC Analytics are both products of Infoscience Japan.Infoscience Logstorage is an integrated log management tool. The device collects logs from all company information systems for integrated management.Infoscience ELC Analytics is a server log management too...

JVN#41853173: OS command injection vulnerability in multiple Infoscience Corporation log management tools

Infoscience Corporation's multiple log management tools provide an FTP upload function as one of the log collection methods, and is able to set to allow the adminitrators to accept FTP uploads. In a situation where the FTP upload function is enabled and there is a flaw of input value handling in...

IBM Planning Analytics Information Disclosure Vulnerability (CNVD-2021-06640)

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. An information disclosure vulnerability exists in IBM Planning Analytics 2.0. The vulnerability...

IBM Planning Analytics Information Disclosure Vulnerability (CNVD-2021-06944)

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A security vulnerability exists in IBM Planning Analytics version 2.0 that allows web pages to be...

IBM Planning Analytics Information Disclosure Vulnerability (CNVD-2021-06639)

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A security vulnerability exists in IBM Planning Analytics 2.0, which can be exploited by attackers...

Oracle Business Intelligence Enterprise Edition Information Disclosure Vulnerability (CNVD-2021-08012)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. Oracle Fusion Middleware's Oracle Business Intelligence Enterprise Edition...

CVE-2021-1997

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications component: Report. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Design/Logic Flaw

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications component: Report. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-2003

Vulnerability in the Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web Dashboards. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with...

Buffer overflow

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker wi...

CVE-2021-2025

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker wi...

CVE-2021-2025

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker wi...

CVE-2021-2025

The CVE-2021-2025 entry affects Oracle Fusion Middleware — Oracle BI Enterprise Edition (Analytics Web General). Affected versions: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise OBIEE; attacks require...

CVE-2021-1997

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications component: Report. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-1997

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications component: Report. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-1997

CVE-2021-1997 affects Oracle Hospitality Reporting and Analytics (Oracle Food and Beverage Applications), component: Report, with affected version 9.1.0. The issue is exploitable over HTTP with network access by a low-privilege attacker, leading to unauthorized creation, deletion, or modification...

Oracle Hospitality Reporting and Analytics Access Control Error Vulnerability

Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data to provide operational and analytical insights into business operations and improve efficiency by delivering information to all roles within an organization. An unspecified vulnerability...

Unspecified Vulnerability in Oracle Business Intelligence Enterprise Edition (CNVD-2021-08160)

Oracle Business Intelligence Enterprise Edition OBIEE is a business intelligence BI tool from Oracle Corporation. An unspecified vulnerability exists in the Analytics Web General component in Oracle Business Intelligence Enterprise Edition 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. An attacke...

CVE-2020-4881

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force...