7261 matches found
CVE-2020-2648
Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 16.0. Easily exploitable vulnerability allows physical access to compromise Oracle Retail Customer...
CVE-2020-2649
The CVE-2020-2649 entry concerns Oracle Retail Customer Management and Segmentation Foundation (Internal Operations) v16.0. The vulnerability is described as allowing a low-privilege attacker with logon to the hosting infrastructure to read a subset of data from the Foundation. Affected component...
CVE-2020-2567
The CVE-2020-2567 entry concerns Oracle Retail Customer Management and Segmentation Foundation (Security component) with affected version 18.0. The vulnerability is described as exploitable by a high-privilege attacker who can access over the network via HTTP; successful exploitation requires use...
CVE-2020-2567
Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Security. The supported version that is affected is 18.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...
Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2020-04015)
Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on a variety of management software collection, is a seamless integration of a management suite. Oracle...
Serpico admin user can be accessed without admin creds
An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. An admin can change their password without providing the current password, by using interfaces outside the Change Password screen. Thus, requiring the admin to enter an Old Password value on the Change...
Oracle Retail Customer Management and Segmentation Foundation Remote Security Vulnerability
Description Oracle Retail Customer Management and Segmentation Foundation is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Security' component is affected. This vulnerability affects the following supported versions: 18.0 Technologies...
Oracle Retail Customer Management and Segmentation Foundation Multiple Security Vulnerabilities
Description Oracle Retail Customer Management and Segmentation Foundation is prone to multiple security vulnerabilities. The 'Internal Operations' component is affected. These vulnerabilities affect the following supported versions: 16.0 Technologies Affected Oracle Retail Customer Management and...
A week in security (January 6 – 12)
Last week on Malwarebytes Labs, we told readers how to check the safety of websites and their related files, explored the shady behavior taking place within the billion-dollar search industry, broke down the top six ways that hackers target retail businesses, and put a spotlight on the ransomware...
Why I joined Imperva
I’ve been in the cybersecurity industry for a couple of decades now, and the tech industry even longer. If there’s one thing I’ve learned across all my roles, it’s the value of focusing on customer experience. It sounds intuitive, right? I’m sure many of you are nodding your heads or giving me th...
CVE-2020-1767
CVE-2020-1767 affects OTRS Community Edition 6.0.x (up to 6.0.24) and OTRS 7.0.x (up to 7.0.13). Description: Agent A can save a draft; Agent B can open it, modify the text, and send it as Agent A, so customers see a message sent by the original agent. Debian/Nessus advisories indicate patches: u...
CVE-2020-1767
Removed by vendor...
Cisco Unified Customer Voice Portal Privilege Permission and Access Control Issues Vulnerability
Cisco Unified Customer Voice Portal CVP is a solution that provides automated Internet Protocol IP-based customer self-service and call routing as a stand-alone Interactive Voice Response IVR system or integrated with a contact center. Operations, Administration, Maintenance and Provisioning OAMP...
Ping Identity: No valid SPF record not found
There are no SPF Records found for ort-admin.pingone.com Description: There is an email spoofing vulnerability. Email spoofing is the forgery of an email header so that the message appears to have originated from someone or somewhere other than the actual source. Email spoofing is a tactic used i...
Cisco Unified Customer Voice Portal CVE-2019-16017 Denial of Service Vulnerability
Description Cisco Unified Customer Voice Portal is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to cause denial-of-service conditions. This issue is being tracked by Cisco Bug ID CSCvp72741. Technologies Affected Cisco Unified...
Thrilled to Join Imperva
Today marks my first day at Imperva and I could not be more thrilled to join the outstanding team behind the impressive products that keep our customers safe every day. I’ve been asked to share why I joined Imperva, and candidly there are a number of reasons: First, timing: I think that security ...
CVE-2019-16274
DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP...
CVE-2019-16274
DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP...
