CVE-2014-0944

IBM ODM is vulnerable to CSRF in the RES Console of Rule Execution Server. Affected: IBM WebSphere Operational Decision Manager v7.5 (before FP3 IF37), v8.0 (before MP1 FP2), and v8.5 (before MP1 IF26). Root cause described as improper validation of user-supplied input in the RES Console, enablin...

CVE-2014-0944

Cross-site request forgery CSRF vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert...

CVE-2014-0946

CVE-2014-0946 concerns IBM Operational Decision Manager (ODM) RES Console in Rule Execution Server. The vulnerability arises from missing Cache-Control HTTP headers, which could allow an attacker to obtain sensitive information from an unattended workstation. Affected products/versions include IB...

IBM Operational Decision Manager跨站脚本和跨站请求伪造漏洞

Bugtraq ID:66186 IBM Operational Decision Manager是一个运营决策管理平台。 IBM Operational Decision Manager存在跨站脚本和跨站请求伪造攻击，允许攻击者利用漏洞获取敏感信息，劫持用户会话或执行恶意操作。 0 IBM Operational Decision Manager 7.5.0.3 IBM Operational Decision Manager 7.5.0.4 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：...

Oracle Java SE CVE-2013-5838 Remote Security Vulnerability

Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'Libraries' sub-component. This vulnerability affects the following supported versions: Java SE 7u25, Java SE Embedded 7u25 Technologies...