CVE-2021-2025

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker wi...

CVE-2021-2013

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2021-1999

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: RAS subsystems. The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit...

PT-2021-1761

Name of the Vulnerable Software and Affected Versions: Oracle iSupport versions 12.1.1 through 12.1.3 Oracle iSupport versions 12.2.3 through 12.2.10 Description: The issue is related to insufficient input validation in the User Responsibilities component of Oracle iSupport, allowing an...

PT-2021-1670

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 6.1.18 Description The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a highly privileged attacker with logon to the infrastructure to compromise...

CVE-2021-2089: Undefined Security Weakness

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Runtime Catalog. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...

PT-2021-1703

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Oracle E-Business Suite versions 12.2.3 through 12.2.10 Description The issue is related to the Message Display component of the Oracle Email Center product. It allows an unauthenticated...

PT-2021-1718

Name of the Vulnerable Software and Affected Versions: Oracle BI Publisher versions 5.5.0.0.0 through 5.5.0.0.0 Oracle BI Publisher versions 11.1.1.9.0 through 11.1.1.9.0 Oracle BI Publisher versions 12.2.1.3.0 through 12.2.1.4.0 Description: The issue is related to inadequate access control in t...

PT-2021-1750

Name of the Vulnerable Software and Affected Versions Oracle Email Center versions 12.1.1 through 12.1.3 Oracle Email Center versions 12.2.3 through 12.2.10 Description The issue is related to insufficient access control in the Message Display component of Oracle Email Center, allowing an...

PT-2021-1784

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.4 through 8.5.5 Description: The issue is related to inadequate access controls in the Oracle Outside In Technology product, specifically the Outside In Filters component. This allows an unauthenticat...

PT-2021-1702

Name of the Vulnerable Software and Affected Versions Oracle iSupport versions 12.1.1 through 12.1.3 Oracle iSupport versions 12.2.3 through 12.2.10 Description The issue is related to insufficient access control in the Profile component of Oracle iSupport, allowing an unauthenticated attacker wi...

PT-2021-1785

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.4 through 8.5.5 Description: The issue is related to insufficient access controls in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. This...

CVE-2020-36164

An issue was discovered in Veritas Enterprise Vault through 14.0. On start-up, it loads the OpenSSL library. The OpenSSL library then attempts to load the openssl.cnf configuration file which does not exist at the following locations in both the System drive typically C:\ and the product's...

FUEL CMS SQL Injection Vulnerability (CNVD-2021-02034)

FUEL CMS is a content management system based on CodeIgniter. FUEL CMS 1.4.11 suffers from a SQL injection vulnerability. The vulnerability can be exploited by an attacker via the 'name' parameter in /fuel/permissions/create/ to compromise an application, access or modify data, or exploit a...

SAP Business Warehouse and SAP BW4HANA Operating System Command Injection Vulnerability

SAP Business Warehouse BW is SAP's data warehouse solution.SAP BW provides a high-performance infrastructure that helps you evaluate and interpret data. Decision makers can make informed decisions based on the analyzed data and identify target-specific activities. An operating system command...

Code injection

SAP Business Warehouse, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 782, and SAP BW4HANA, versions - 100, 200 allows an attacker authenticated with high developer privileges to submit a crafted request to generate and execute code without requiring any user interaction. It i...

Microsoft SharePoint Information Disclosure Vulnerability (CNVD-2021-48904)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

Food-Supply Giant Americold Admits Cyberattack

Americold, a company whose cold-storage capabilities are integral to the U.S. food-supply chain and soon, COVID-19 vaccine distribution, has confirmed an operations-impacting cyberattack, according to a filing with the Securities and Exchange Commission SEC. The filing was brief and read in part:...

Oracle Business Intelligence Publisher Multiple Vulnerabilities (Jul 2020 CPU)

The 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0 versions of Oracle Business Intelligence Enterprise Edition installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2020 CPU advisory. - Easily exploitable vulnerability allows unauthenticated attacker with network...

PT-2023-25157 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle versions 3.9 to 3.9.21 Moodle versions 3.11 to 3.11.14 Moodle versions 4.0 to 4.0.8 Moodle versions 4.1 to 4.1.3 Moodle version 4.2 Description: A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw...