CVE-2019-11658

The CVE-2019-11658 entry describes Information exposure in Micro Focus Content Manager (versions 9.1, 9.2, 9.3) when configured to use an Oracle database. The underlying issue permits valid system users to access a limited subset of records they would not normally access, particularly in an undis...

CVE-2019-11653

Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request...

CVE-2019-11653

Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request...

CVE-2019-11653

Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request...

CVE-2019-11653

The CVE-2019-11653 entry affects Micro Focus Content Manager versions 9.1, 9.2, and 9.3 and is described as a Remote Access Control Bypass that could allow manipulation of data stored during another user’s CheckIn request. The connected records (RH, NVD, NVD duplicates) confirm the affected produ...

Security Bulletin: Publicly disclosed vulnerability in Java used by IBM FileNet Content Manager

Summary The following security vulnerabilities exist in the Oracle Java Development Kits shipped with IBM FileNet Content Manager 5.2.1, 5.5.1, and 5.5.2. Vulnerability Details CVEID: CVE-2019-2684 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedde...

Creatiwity wityCMS cross-site scripting vulnerability (CNVD-2019-19292)

Creatiwity wityCMS is a lightweight PHP-based content management system CMS. A cross-site scripting vulnerability exists in the utilisateur menu in Creatiwity wityCMS version 0.6.2. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker ca...

Cross site scripting

CMS Made Simple 2.2.10 has XSS via the m1name parameter in "Add Article" under Content - Content Manager - News...

CVE-2019-11226

CMS Made Simple 2.2.10 has XSS via the m1name parameter in "Add Article" under Content - Content Manager - News...

CVE-2019-11226

CMS Made Simple 2.2.10 has XSS via the m1name parameter in "Add Article" under Content - Content Manager - News...

CVE-2019-11226

CMS Made Simple 2.2.10 has XSS via the m1name parameter in "Add Article" under Content - Content Manager - News...

CVE-2019-11226

CVE-2019-11226 : CMS Made Simple 2.2.10 contains a cross-site scripting (XSS) vulnerability reachable via the m1_name parameter in the Add Article workflow under Content → Content Manager → News. Several sources describe this as an XSS issue (some references note authenticated, persistent XSS beh...

Micro Focus Content Manager File Upload Vulnerability

Micro Focus Content Manager is an electronic document and records management system. A file upload vulnerability exists in the Web client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. An attacker could exploit this vulnerability ...

Unrestricted file upload

An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to...

CVE-2019-3489

An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to...

CVE-2019-3489

An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to...

CVE-2019-3489

An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to...

CVE-2019-3489

CVE-2019-3489 affects the Web Client component of Micro Focus Content Manager (versions 9.1–9.3) when configured for ADFS authentication. It is an unauthenticated file-upload vulnerability that could allow a remote attacker to upload content to arbitrary locations on the Content Manager server. T...

Security Bulletin: IBM FileNet Content Manager and IBM Enterprise Content Management Text Search security vulnerability in Apache PDFBox

Summary Denial of service vulnerability may affect Apache PDFBox v1.8.15 used by IBM FileNet Content Manager and IBM Enterprise Content Management Text Search. Vulnerability Details CVEID: CVE-2018-11797 DESCRIPTION: Apache PDFBox is vulnerable to a denial of service, caused by a flaw when parsin...

The vulnerability of the Cover Letter sub-component of the Oracle Content Manager component in the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Cover Letter sub-component of the Oracle Content Manager component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data using the HTTP protocol...