The vulnerability of Microsoft Discovery Studio’s research environment arises from the improper elimination of special elements in data queries, allowing an intruder to disclose protected information.

The vulnerability of the Microsoft Discovery Studio research environment is related to the improper elimination of special elements in data queries. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

Microsoft Discovery Studio Information Disclosure Vulnerability

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network...

EUVD-2026-70791

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network...

CVE-2026-62906

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network...

CVE-2026-62906 Microsoft Discovery Studio Information Disclosure Vulnerability

...

CVE-2026-62906 Microsoft Discovery Studio Information Disclosure Vulnerability

...

CVE-2026-62906

Microsoft Discovery Studio is affected by an improper neutralization of special elements in data query logic , allowing an unauthorized attacker to disclose information over a network . The vulnerability is rated CVSS 7.4 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N, meaning it req...

PT-2026-85307

Name of the Vulnerable Software and Affected Versions Microsoft Discovery Studio affected versions not specified Description Improper neutralization of special elements in data query logic allows an unauthorized attacker to disclose protected information over a network. Recommendations At the...

CVE-2026-62906: Improper Neutralization of Special Elements in Data Query Logic

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Endeca Information Discovery Studio software component of the Oracle Fusion Middleware is related to errors in the code. Exploiting this vulnerability may allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Endeca Information Discovery Studio software component of the Oracle Fusion Middleware is related to errors in the code. Exploiting this vulnerability may allow an attacker, operating remotely, to compromise the integrity, accessibility, and confidentiality of...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Oracle Endeca Information Discovery Studio software component of the Oracle Fusion Middleware is related to errors in the code. Exploiting this vulnerability may allow an attacker, operating remotely, to compromise the integrity, accessibility, and confidentiality of...

Unspecified Vulnerability in Oracle Fusion Oracle Endeca Information Discovery Studio Component (CNVD-2015-04745)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Middleware Oracle Endeca Information Discovery Studio component that can be exploited by remote attackers to compromise system integrity,...

Unspecified Vulnerability in Oracle Fusion Oracle Endeca Information Discovery Studio Component (CNVD-2015-04743)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Middleware Oracle Endeca Information Discovery Studio component that can be exploited by remote attackers to compromise system integrity,...

Unspecified Vulnerability in Oracle Fusion Oracle Endeca Information Discovery Studio Component (CNVD-2015-04747)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Middleware Oracle Endeca Information Discovery Studio component that can be exploited by remote attackers to compromise system integrity,...

CVE-2015-2606

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

CVE-2015-2605

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

CVE-2015-2603

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

CVE-2015-2602

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...