32 matches found
EUVD-2026-106099
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Admin Console UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...
CVE-2026-101697
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Admin Console UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...
CVE-2026-101697
A vulnerability exists in the Admin Console UI component of the Oracle One-to-One Fulfillment product within Oracle E-Business Suite, affecting versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the product, though the attack req...
PT-2026-119371
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Admin Console UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...
Oracle E-Business Suite: CVE-2026-101697: Critical Patch Update
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite component: Admin Console UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One...
Oracle One-to-One Fulfillment security vulnerabilities
Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Admin Console UI components. Unauthorized attackers may gain access through HTTP network interactions that require user interaction. This allows unauthorized...
Malicious code in security-console-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a180b49026fbe4dd5787621d741ec0d6ef2da9a212854a9d5e3cebbdfbb3c0a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in security-console-ui
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2026-10018 Malicious code in security-console-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a180b49026fbe4dd5787621d741ec0d6ef2da9a212854a9d5e3cebbdfbb3c0a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-41271
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to read arbitrary files from the device...
SUSE CVE-2016-11078
An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information credential fields within config.json via the System Console UI...
PT-2025-45857
Mattermost Server exposes sensitive information via its System Console UI in github.com/mattermost/mattermost-server...
EUVD-2016-2067
Malware in sbrugna...
CVE-2016-11078
An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information credential fields within config.json via the System Console UI...
GO-2024-3015 ZITADEL has improper HTML sanitization in emails and Console UI in github.com/zitadel/zitadel
ZITADEL has improper HTML sanitization in emails and Console UI in github.com/zitadel/zitadel. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...
GHSA-V333-7H2P-5FHV ZITADEL has improper HTML sanitization in emails and Console UI
Impact ZITADEL uses HTML for emails and renders certain information such as usernames dynamically. That information can be entered by users or administrators. Due to a missing output sanitization, these emails could include malicious code. This may potentially lead to a threat where an attacker,...
CVE-2024-41953 Zitadel improperly sanitizes HTML in emails and Console UI
Zitadel is an open source identity management system. ZITADEL uses HTML for emails and renders certain information such as usernames dynamically. That information can be entered by users or administrators. Due to a missing output sanitization, these emails could include malicious code. This may...
CVE-2024-41953: Improper Neutralization of Input During Web Page Generation
Zitadel is an open source identity management system. ZITADEL uses HTML for emails and renders certain information such as usernames dynamically. That information can be entered by users or administrators. Due to a missing output sanitization, these emails could include malicious code. This may...
GHSA-CVW9-C57H-3397 ZITADEL Vulnerable to Session Information Leakage
Impact ZITADEL provides users the ability to list all user sessions of the current user agent browser by API and in the Console UI. Due to a missing check, user sessions without that information e.g. when created though the session service were incorrectly listed exposing potentially other user's...
ZITADEL Vulnerable to Session Information Leakage
Impact ZITADEL provides users the ability to list all user sessions of the current user agent browser by API and in the Console UI. Due to a missing check, user sessions without that information e.g. when created though the session service were incorrectly listed exposing potentially other user's...