1646 matches found
CVE-2021-33667
Under certain conditions, SAP Business Objects Web Intelligence BI Launchpad versions - 420, 430, allows an attacker to access jsp source code, through SDK calls, of Analytical Reporting bundle, a part of the frontend application, which would otherwise be restricted...
CVE-2021-33667
CVE-2021-33667 affects SAP Business Objects Web Intelligence (BI Launchpad) versions 420 and 430. Affected component is the frontend Analytical Reporting bundle accessed via SDK calls, where an attacker could access JSP source code that would normally be restricted, resulting in information discl...
Security Update for Microsoft Power BI Report Server (July 2021) (deprecated)
Deprecated because the exposure impacts Power BI Desktop %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/10/14. Deprecated because this impacts Power BI Desktop, not the server include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid151623;...
Power BI Remote Code Execution Vulnerability
...
Vulnerability fixed in Microsoft Power BI
A vulnerability has been fixed in the Microsoft Power BI application. A malicious party could potentially abuse it to execute arbitrary code with elevated privileges. Microsoft has made updates available that fix the described vulnerability described. We recommend that you install these updates...
Microsoft Power BI 代码注入漏洞
Microsoft Power BI is an interactive data visualization software from Microsoft USA that focuses on business intelligence. It is part of the Microsoft Power Platform. A code injection vulnerability exists in Microsoft Power BI. The following products and versions are affected: Power BI Report...
PT-2021-4160 · Microsoft · Power Bi Desktop
Name of the Vulnerable Software and Affected Versions: Power BI Desktop affected versions not specified Description: The issue is related to incorrect code generation management in the Power BI Desktop data visualization application. Exploitation of this issue may allow a remote attacker to execu...
KLA12219 RCE vulnerability in Microsoft Power BI
A remote code execution vulnerability was found in Microsoft Power BI. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-31984 Related products Microsoft-Power-BI CVE list CVE-2021-31984 critical KB list Solution Install necessary updates from...
Information Disclosure Vulnerability in Lipo's Second Generation Firewall System
Leaf's second-generation firewall system is a product that provides comprehensive protection with L2-L7 layers of security visibility, effectively identifies content risks from the network and application layers through bi-directional detection of network traffic, and provides stronger security...
The vulnerability of the BI Publisher Integration component of the Oracle Concurrent Processing application in the Oracle E-Business Suite allows a malicious individual to gain access to modify, add, or delete data, as well as to unauthorizedly access protected information.
The vulnerability of the BI Publisher Integration component of the Oracle Concurrent Processing application in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, as well as ga...
Oracle Business Intelligence Publisher Multiple Vulnerabilities (Apr 2021 CPU)
The version of Oracle Business Intelligence Publisher or Oracle Analytics Server 5.5 running on the remote host is 11.1.1.9.x prior to 11.1.1.9.210215, 12.2.1.3.x prior to 12.2.1.3.210405, 12.2.1.4.x prior to 12.2.1.4.210402, or 12.2.5.5.x OAS 5.5 prior to 12.2.5.5.210331. It is, therefore,...
CVE-2021-2295
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2021-2295
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
Design/Logic Flaw
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2021-2295
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2021-2295
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: BI Publisher Integration. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
Oracle E-Business Suite 安全漏洞
Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Concurrent...
The vulnerability of Power BI report servers, related to the lack of protection for operational data, allows attackers to gain unauthorized access to protected information.
The vulnerability of Power BI report servers lies in the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...