8005 matches found
CVE-2020-14843
CVE-2020-14843 affects Oracle Fusion Middleware’s Oracle BI Enterprise Edition (OBIEE) Analytics Actions. Vulnerable versions are OBIEE 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. The flaw allows an unauthenticated attacker with network access via HTTP to compromise OBIEE, potentially enabling unauthor...
CVE-2020-14843
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Actions. Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...
CVE-2020-14815
CVE-2020-14815 affects Oracle BI Enterprise Edition Analytics Actions. Affected: OBIEE versions 5.5.0.0.0, 12.2.1.3.0, 12.2.1.4.0. Root cause: insufficient input validation in Analytics Actions. Consequences: unauthenticated network access via HTTP can lead to unauthorized data disclosure and pos...
CVE-2020-14766
CVE-2020-14766 affects Oracle Fusion Middleware’s Oracle Business Intelligence Enterprise Edition (OBIEE) Analytics Web Administration. Affected versions: OBIEE 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. Description indicates an easily exploitable issue where a low-privilege, unauthenticated ...
CVE-2020-14753
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications component: Installation. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...
CVE-2020-14753
Oracle Hospitality Reporting and Analytics Installation vulnerability (version 9.1.0) allows a low-privileged attacker with login to the infrastructure to compromise the product due to privilege/Access Control issues. Exploitation requires user interaction. Attacks could lead to unauthorized acce...
CVE-2020-14753
Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications component: Installation. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...
PT-2020-4565 · Oracle · Oracle Business Intelligence Enterprise Edition
Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition versions 5.5.0.0.0, 12.2.1.3.0, 12.2.1.4.0 Description: The issue is related to insufficient input validation in the Analytics Actions component. It allows an unauthenticated attacker with netwo...
Security Bulletin: Vulnerabilities in Apache ActiveMQ affect IBM Operations Analytics Predictive Insights (CVE-2020-11998, CVE-2020-13920)
Summary Apache ActiveMQ is used by IBM Operations Analytics Predictive Insights. IBM Operations Analytics Predictive Insights has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-13920 DESCRIPTION: Apache ActiveMQ is vulnerable to a man-in-the-middle attack, caused by improper...
Security Bulletin: A security vulnerability has been identified in Tivoli Netcool/OMNIbus WebGUI shipped with IBM Operations Analytics Predictive Insights
Summary Tivoli Netcool/OMNIbus WebGUI is shipped as a component of IBM Operations Analytics Predictive Insights. Information about possible 'input validation' security vulnerability was reported to affect multiple Web GUI pages. Vulnerability Details Refer to the security bulletins listed in the...
Security Bulletin: A security vulnerability has been identified in Tivoli Netcool/OMNIbus WebGUI shipped with IBM Operations Analytics Predictive Insights
Summary Tivoli Netcool/OMNIbus WebGUI is shipped as a component of IBM Operations Analytics Predictive Insights. Information about possible 'path traversal' security vulnerability was reported to affect multiple Web GUI pages. Vulnerability Details Refer to the security bulletins listed in the...
Security Bulletin: Netcool Operations Insight - Cloud Native Event Analytics is affected by an Apache Commons Codec vulnerability
Summary Netcool Operations Insight - Cloud Native Event Analytics has addressed the following vulnerability in Apache Commons Codec Vulnerability Details Third Party Entry: 177835 DESCRIPTION: Apache Commons Codec information disclosure CVSS Base score: 7.5 CVSS Temporal Score: See:...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Operations Analytics Predictive Insights (CVE-2020-4464)
Summary Websphere Application Server WAS is shipped as a component of IBM Operations Analytics Predictive Insights. Information about a security vulnerability to a command execution affecting IBM WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins...
2021 Detection and Response Planning, Part 2: Driving SOC Efficiency With a Detections-First Approach to SIEM
This is the second installment of our series around 2021 security planning. In part one, Rapid7 Detection and Response Practice Advisor Jeffrey Gardner offered tips and advice for ramping up annual security planning. In this installment, we’ll explore the importance of reliable and comprehensive...
IBM Cognos Analytics Denial of Service Vulnerability (CNVD-2020-57820)
IBM Cognos Analytics is a suite of business intelligence software from IBM USA that provides valuable information, secure data governance and reporting. A denial of service vulnerability exists in IBM Cognos Analytics version 11.0, 11.1. The vulnerability stems from a failure to catch an exceptio...
Imperva’s Mobile Security App
How many apps do you currently have on your mobile device? Is this number a total across both your personal and professional devices? Did you know that between Android’s Google Play Store and Apple’s App Store, there are between 2.2 and 2.8 million apps available to download? Did you know that,...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Operations Analytics Predictive Insights (CVE-2020-4365)
Summary Websphere Application Server WAS is shipped as a component of IBM Operations Analytics Predictive Insights. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...
CVE-2020-4388
IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug information could also be used in future attacks. IBM X-Force ID: 179270...
CVE-2020-4302
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By persuading a victim to open a specially-crafted excel file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID:...
CVE-2020-4388
IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposing debug information could also be used in future attacks. IBM X-Force ID: 179270...