CVE-2018-3128

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with network access via HTTP to compromise...

CVE-2018-3168

Vulnerability in the Oracle Identity Analytics component of Oracle Fusion Middleware subcomponent: Core Components. The supported version that is affected is 11.1.1.5.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...

CVE-2018-3128

The CVE-2018-3128 entry concerns Oracle Hospitality Reporting and Analytics (Oracle Food and Beverage Applications) with affected version 9.0. A low-privileged attacker who has Report privileges and can access via HTTP can exploit this to cause unauthorized creation, deletion, or modification of ...

CVE-2018-3168

CVE-2018-3168 affects the Oracle Identity Analytics component within Oracle Fusion Middleware (subcomponent Core Components), specifically version 11.1.1.5.8. The vulnerability, documented with CVSSv3.0 base score 7.1, enables a low-privilege, network-accessible attacker (via HTTP) to perform una...

Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics (CNVD-2018-24300)

Oracle Food and Beverage Applications is the United States Oracle Oracle company's set of food and beverage sales management solutions. Hospitality Reporting and Analytics is one of the hotel reporting and analysis components. A security vulnerability exists in the Hospitality Reporting and...

Citrix NetScaler Application Delivery Management (ADM)

The remote host appears to be running Citrix NetScaler Application Delivery Management ADM, formerly know as Management and Analytics System MAS. ADM provides centralized network management, analytics, automation, and orchestration to support applications deployed across hybrid cloud and...

The 4 Core Pillars of Endpoint Security

Cb Connect is always an exciting time for me. At Cb Connect 2017, we unveiled our vision for the Cb Predictive Security Cloud PSC. Over the past year, this platform has expanded and grown to provide better prevention, detection and response for our global customers. Today, at CbConnect18, we...

CVE-2018-0451

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for t...

CVE-2018-0452

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient...

CVE-2018-0451

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for t...

CVE-2018-0452

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient...

Cross site request forgery (csrf)

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for t...

CVE-2018-0452 Cisco Tetration Analytics Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient...

CVE-2018-0451 Cisco Tetration Analytics Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for t...

CVE-2018-0451 Cisco Tetration Analytics Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an authenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for t...

CVE-2018-0452

CVE-2018-0452 affects Cisco Tetration Analytics web-based management interface. The vulnerability is an unauthenticated XSS due to insufficient validation of user-supplied input in the web UI. An attacker could lure a user into clicking a crafted link, enabling arbitrary script execution in the i...

CVE-2018-0452 Cisco Tetration Analytics Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Tetration Analytics could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient...

CVE-2018-0451

CVE-2018-0451 affects Cisco Tetration Analytics web-based management interface. An authenticated, remote attacker can perform arbitrary actions on an affected device via CSRF due to insufficient CSRF protections. Exploitation requires a user to click a crafted link; impact is actions performed wi...

Partner Perspectives: Integrate your SIEM, UEBA + EDR Solution with Securonix and Carbon Black

Nitin Agale is the Senior VP of Products for Securonix. Your endpoints are a valuable part of your enterprise structure. They are the computers your employees use and the servers your company depends on. Defending your endpoints is important, but it’s critical that your endpoint defense is just o...