Oracle Enterprise Repository Unauthorized Operation Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments, the platform provides middleware, software collection and other functions. enterprise Repository is one of the data storage...

CVE-2017-1326

Summary of CVE-2017-1326 findings : IBM Sterling B2B Integrator 5.2 is affected by a permission-check vulnerability where the system does not properly restrict user requests based on permission level, allowing an attacker to manipulate POST parameters and update data for other users. The CVSSv3 b...

CVE-2017-1326: Improper Privilege Management

IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to update data related to other users, by manipulating the parameters passed in the POST request. IBM X-Force ID: 126060...

PT-2017-12965

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway affected versions not specified Description The issue allows users to update data related to other users by manipulating parameters passed in the POST request, due to improper restriction of user requests based on...

PT-2017-17402

Name of the Vulnerable Software and Affected Versions android kernel huawei msm8916 versions through 2017-06-16 Description The issue allows attackers to cause a denial of service, resulting in a NULL pointer dereference and device crash, via a crafted write request to the...

Oracle MySQL Connectors Unauthorized Operation Vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Connectors is one of the drivers to connect applications that use MySQL. A security vulnerability exists i...

CVE-2017-3590

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Python. Supported versions that are affected are 2.1.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to...

PT-2017-15914

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 12.0.0 and 12.1.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks can result in unauthorized update,...

PT-2017-15926

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.1 through 12.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks can result in unauthoriz...

CVE-2017-3442

Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2017-3421

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-3398

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2017-3281

Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2016-8323

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2016-8323

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2017-9614

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Enterprise Limits and Collateral Management versions 12.0.0 through 12.0.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Enterprise Limits and Collateral...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris Component

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local security vulnerability exists in the Kernel Zones subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version 11.3. An...

CVE-2016-2998

Cross-site request forgery CSRF vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update data...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update data...

CVE-2016-2998: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update data...