Design/Logic Flaw

Unspecified vulnerability in the BI Publisher component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to Mobile Service...

CVE-2014-4249

CVE-2014-4249 affects Oracle Fusion Middleware 11.1.1.7’s BI Publisher Mobile Service. The vulnerability is an information-disclosure issue with unknown vectors that could affect confidentiality. Root cause and affected components are described as an unspecified vulnerability in the Mobile Servic...

CVE-2014-0436

Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Web Analysis...

CVE-2014-0436

Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Web Analysis...

CVE-2014-0436

Technical details about CVE-2014-0436 (affected components, root cause, impact, and fixes) are not publicly available in the provided documents. Monitor for updates.

PT-2014-5761

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 11.1.1.7 Description The issue affects confidentiality and is related to the Mobile Service in the BI Publisher component. It allows remote attackers to exploit the vulnerability via unknown vectors...

PT-2014-3628

Name of the Vulnerable Software and Affected Versions Oracle Hyperion versions 11.1.2.2 through 11.1.2.3 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to Web Analysis in the Hyperion BI+ component. Recommendations Fo...

CVE-2014-0436: Undefined Security Weakness

Unspecified vulnerability in the Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Web Analysis...

CVE-2014-4249: Undefined Security Weakness

Unspecified vulnerability in the BI Publisher component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to Mobile Service...

Pentaho BI 1.x Multiple Cross Site Scripting and Information Disclosure Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/36672/info Pentaho BI is prone to multiple cross-site scripting and information-disclosure vulnerabilities because it fails to properly validate user-supplied input. An attacker may leverage these issues to execute...

SapGUI BI 7100.1.400.8 - Heap Corruption Exploit

No description provided by source. !-- Product: SapGUI BI File: c:\program files\sap\business explorer\bi\wadmxhtml.dl Version: 7100.1.400.8 ClassID: 30DD068D-5AD9-434C-AAAC-46ABE37194EB RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for...

Teracom Modem T2-B-Gawv1.4U10Y-BI - Stored XSS Vulnerability

No description provided by source. Exploit Title: Teracom Modem Stored XSS Vulnerability Date: 19-01-2014 Author: Rakesh S Software Link: http://www.teracom.in/ Version: T2-B-Gawv1.4U10Y-BI Tested on: Windows 7 Code : GET...

Low: Red Hat Security Advisory: rhevm-dwh 3.3.3 security and bug fix update

An updated rhevm-dwh package that fixes one security issue and two bugs is now available. The Red Hat Security Response Team has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CV...

Sql injection

SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to the J2EE schema...

CVE-2013-7355

SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to the J2EE schema...

CVE-2013-7355

CVE-2013-7355 : The Red Hat, NVD and related records describe a SQL injection vulnerability in SAP BI Universal Data Integration . It allows remote attackers to execute arbitrary SQL commands via unspecified vectors, with the issue tied to the J2EE schema . The available sources do not provide ex...

CVE-2013-7355: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to the J2EE schema...

PT-2014-3386

Name of the Vulnerable Software and Affected Versions SAP BI Universal Data Integration affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is related to the J2EE schema. Recommendations At the moment, there is no...

Oracle BI Publisher Default Credentials Check

Nessus was able to login to the remote Oracle BI Publisher install using a known set of default credentials. This allows a remote attacker to gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

CVE-2014-0854

The server in IBM Cognos Business Intelligence BI 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 10.2 before IF7, 10.2.1 before IF4, and 10.2.1.1 before IF4 allows remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an...