CVE-2024-20928

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware component: Content Server. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content...

CVE-2024-20928

CVE-2024-20928 affects Oracle WebCenter Content (Content Server) as part of Oracle Fusion Middleware. Affected version: 12.2.1.4.0. Description indicates an input-validation/logic flaw allowing an unauthenticated attacker with network access via HTTP to compromise the server, potentially enabling...

PT-2024-1191 · Oracle · Oracle Webcenter Content

Name of the Vulnerable Software and Affected Versions: Oracle WebCenter Content version 12.2.1.4.0 Description: The issue is related to insufficient input validation in the Content Server component of Oracle WebCenter Content, allowing an unauthenticated attacker with network access via HTTP to...

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to access confidential information.

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to insufficient validation of input data. Exploiting this vulnerability may allow a malicious actor to gain access to confidential information from a remote location...

CVE-2023-31871

OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root owned SUID binary dmsecurewriter. The binary has security controls in place preventing creation of a file in a...

CVE-2023-31871

OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root owned SUID binary dmsecurewriter. The binary has security controls in place preventing creation of a file in a...

CVE-2023-31871

OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root owned SUID binary dmsecurewriter. The binary has security controls in place preventing creation of a file in a...

Design/Logic Flaw

OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root owned SUID binary dmsecurewriter. The binary has security controls in place preventing creation of a file in a...

PT-2023-23499 · Opentext · Opentext Documentum Content Server

Name of the Vulnerable Software and Affected Versions: OpenText Documentum Content Server versions prior to 23.2 Description: The issue allows for privilege escalation from a non-privileged Documentum user to root. The software comes prepackaged with a root-owned SUID binary dm secure writer. Thi...

OpenText Documentum Content Server 安全漏洞

OpenText Documentum Content Server is a data storage platform from OpenText, Inc. that is used to provide secure, enterprise-wide control over any type of content. A security vulnerability exists in OpenText Documentum Content Server versions prior to 23.2, which stems from a privilege escalation...

CVE-2023-31871

OpenText Documentum Content Server before 23.2 is affected by a privilege-escalation vulnerability. A root-owned SUID binary, dm_secure_writer, can bypass security controls to enable an arbitrary file write as root from a non-privileged Documentum user. Documents from Red Hat and PTSecurity corro...

SAP Content Server Cross-Site Scripting Vulnerability

SAP Content Server is a standalone component that can store any format and content. A cross-site scripting vulnerability exists in SAP Content Server version 7.53, which can be exploited by attackers to inject malicious JavaScript scripts...

CVE-2023-26457

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...

CVE-2023-26457

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...

Cross site scripting

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...

CVE-2023-26457

Technical details about CVE-2023-26457 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2023-26457 Cross-Site Scripting (XSS) vulnerability in SAP Content Server

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...

CVE-2023-26457 Cross-Site Scripting (XSS) vulnerability in SAP Content Server

SAP Content Server - version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data...

SAP Content Server 跨站脚本漏洞

SAP Content Server is a standalone component that can store any format and content. A cross-site scripting vulnerability exists in SAP Content Server version 7.53, which can be exploited by attackers to inject malicious JavaScript scripts...

PT-2023-20650 · Sap · Sap Content Server

Name of the Vulnerable Software and Affected Versions: SAP Content Server version 7.53 Description: The issue results from insufficient encoding of user-controlled inputs, leading to a Cross-Site Scripting XSS vulnerability. After successful exploitation, an attacker can read and modify some...