CVE-2021-2349

Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Console. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...

CVE-2021-2349

Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Console. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...

CVE-2021-2349

CVE-2021-2349 affects Oracle Hyperion Essbase Administration Services (EAS Console). Affected are 11.1.2.4 and 21.2. The flaw allows an unauthenticated attacker with network access via HTTP to compromise EAS, potentially leading to unauthorized access to all EAS data. CVSSv3.1 base score is 8.6 (...

PT-2021-7115

Name of the Vulnerable Software and Affected Versions Oracle Essbase versions 11.1.2.4 and 21.2 Description The issue is related to insufficient input validation in the EAS Console component of Oracle Essbase Administration Services. This allows an unauthenticated attacker with network access via...

PT-2021-7200

Name of the Vulnerable Software and Affected Versions Hyperion Essbase Administration Services versions 11.1.2.4 through 21.2 Description The issue exists due to insufficient input validation in the EAS Console component of Oracle Hyperion Essbase Administration Services. This allows a remote...

CVE-2021-2350: Undefined Security Weakness

Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Console. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...

CVE-2021-2349: Undefined Security Weakness

Vulnerability in the Hyperion Essbase Administration Services product of Oracle Essbase component: EAS Console. Supported versions that are affected are 11.1.2.4 and 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...

Oracle Essbase 输入验证错误漏洞

Oracle Hyperion Essbase Administration Services is a robust, cross-platform graphical user interface that makes Essbase administration tasks easy to perform.Oracle Hyperion Essbase Administration Services 11.1.2.4. Release 21.2 contains a security vulnerability in the EAS Console component. An...

Catalog Traversal Vulnerability in Kingdee EAS

Kingdee EAS is a very good business management software. A directory traversal vulnerability exists in Kingdee EAS, which can be exploited by an attacker to obtain sensitive server information...

Command Execution Vulnerability in Kingdee EAS

Based on cloud computing technology, Kingdee EAS provides integrated and intelligent business solutions for large group enterprises. A command execution vulnerability exists in Kingdee EAS, which can be exploited by an attacker to obtain server control privileges...

Arbitrary File Read Vulnerability in Kingdee EAS

Based on cloud computing technology, Kingdee EAS provides integrated and intelligent business solutions for large group enterprises. There is an arbitrary file read vulnerability in Kingdee EAS, which can be exploited by attackers to obtain sensitive information...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android suffers from a security vulnerability that stems from a lack of bounds checking in Parseins in easmdls.c, which may write out of bounds. This could lead to the disclosure of...

Kingdee EAS Cloud suffers from information leakage vulnerability (CNVD-2021-09697)

Based on cloud computing technology, Kingdee EAS Cloud provides integrated and intelligent business solutions for large group enterprises. Information leakage vulnerability exists in Kingdee EAS Cloud, which can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in Kingdee EAS Cloud

Based on cloud computing technology, Kingdee EAS Cloud provides integrated and intelligent business solutions for large group enterprises. A file upload vulnerability exists in Kingdee EAS Cloud, which can be exploited by attackers to gain control of the server...

Information Leakage Vulnerability in Kingdee EAS Cloud

Based on cloud computing technology, Kingdee EAS Cloud provides integrated and intelligent business solutions for large group enterprises. Information leakage vulnerability exists in Kingdee EAS Cloud, which can be exploited by attackers to obtain sensitive information...

Directory Traversal Vulnerability in Kingdee EAS Cloud

Based on cloud computing technology, Kingdee EAS Cloud provides integrated and intelligent business solutions for large group enterprises. A directory traversal vulnerability exists in Kingdee EAS Cloud, which can be exploited by attackers to obtain sensitive information...

CVE-2020-0489

In Parsedata of easmdls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in the media extractor with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android...

PT-2020-11824

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a missing bounds check in the Parse data function of eas mdls.c, which could lead to an out of bounds write. This might result in remote code execution in the media extractor...

PT-2020-11738

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description The issue is related to a possible out of bounds write due to an incorrect bounds check in the Parse insh function of eas mdls.c. This could lead to remote information disclosure in the media extract...

PT-2020-11734

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 11 Description In the Parse wave function of eas mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure in a highly constrained process with no...