SapGUI BI 7100.1.400.8 - Heap Corruption Exploit

No description provided by source. !-- Product: SapGUI BI File: c:\program files\sap\business explorer\bi\wadmxhtml.dl Version: 7100.1.400.8 ClassID: 30DD068D-5AD9-434C-AAAC-46ABE37194EB RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for...

Teracom Modem T2-B-Gawv1.4U10Y-BI - Stored XSS Vulnerability

No description provided by source. Exploit Title: Teracom Modem Stored XSS Vulnerability Date: 19-01-2014 Author: Rakesh S Software Link: http://www.teracom.in/ Version: T2-B-Gawv1.4U10Y-BI Tested on: Windows 7 Code : GET...

Low: Red Hat Security Advisory: rhevm-dwh 3.3.3 security and bug fix update

An updated rhevm-dwh package that fixes one security issue and two bugs is now available. The Red Hat Security Response Team has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CV...

Sql injection

SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to the J2EE schema...

CVE-2013-7355

CVE-2013-7355 : The Red Hat, NVD and related records describe a SQL injection vulnerability in SAP BI Universal Data Integration . It allows remote attackers to execute arbitrary SQL commands via unspecified vectors, with the issue tied to the J2EE schema . The available sources do not provide ex...

CVE-2013-7355

SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to the J2EE schema...

Oracle BI Publisher Default Credentials Check

Nessus was able to login to the remote Oracle BI Publisher install using a known set of default credentials. This allows a remote attacker to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

CVE-2014-0854

The server in IBM Cognos Business Intelligence BI 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an...

CVE-2014-0861

Cross-site scripting XSS vulnerability in the server in IBM Cognos Business Intelligence BI 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter that is no...

CVE-2013-6732

IBM Cognos BI Server is affected by CVE-2013-6732, a reflective cross-site scripting (XSS) vulnerability. An unsanitized input parameter can be exploited by tricking a user into clicking a crafted link to inject arbitrary script/HTML. Affected versions: Cognos BI 8.4.1; 10.1 before IF6; 10.1.1 be...

CVE-2014-0854

The server in IBM Cognos Business Intelligence BI 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an...

CVE-2014-0861

CVE-2014-0861 describes an XSS vulnerability in IBM Cognos BI/BI Server components (IBM Cognos BI Server 8.4.1; 10.1.x; 10.2.x; 10.2.1.x) where an unsafely handled parameter during use of the Back button enables an attacker to inject script/HTML. The issue is tied to insufficient input sanitizati...

CVE-2014-0854

CVE-2014-0854 affects IBM Cognos BI/Analytics server components (e.g., Cognos BI 8.4.1, 10.1.x, 10.2.x with specific IF levels) where an XML document containing an external entity declaration, used with an entity reference, enables remote authenticated users to read arbitrary files (XXE). The roo...

CVE-2013-2988

Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence BI 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability than CVE-2013-2978...

CVE-2013-0586

Cross-site scripting XSS vulnerability in the server in IBM Cognos Business Intelligence BI 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Path traversal

Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence BI 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability than CVE-2013-2988...

CVE-2013-2978

CVE-2013-2978 affects IBM Cognos Business Intelligence server versions 8.4.1, 10.1, 10.1.1, 10.2 and 10.2.1. It is described as an absolute path traversal vulnerability that allows remote authenticated users to read files by leveraging the Report Author privilege. The provided documents do not in...

CVE-2013-2988

CVE-2013-2988 is an absolute path traversal vulnerability in the IBM Cognos BI server affecting versions 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1, enabling remote authenticated users to read files via the Report Author privilege. The issue is addressed in IBM advisories linked to IBM Sterling Contro...

CVE-2013-2988

Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence BI 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability than CVE-2013-2978...

CVE-2013-0586

Cross-site scripting XSS vulnerability in the server in IBM Cognos Business Intelligence BI 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...