CVE-2017-18695

An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.0 software. Attackers who control a certain subdomain can discover a user's credentials, during an email account login, via an EAS autodiscover packet. The Samsung ID is SVE-2016-7654 January 2017...

Information disclosure

An issue was discovered on Samsung mobile devices with M6.0 software. The S/MIME implementation in EAS uses DES where 3DES is intended. The Samsung ID is SVE-2016-5871 June 2016...

CVE-2016-11043

An issue was discovered on Samsung mobile devices with M6.0 software. The S/MIME implementation in EAS uses DES where 3DES is intended. The Samsung ID is SVE-2016-5871 June 2016...

eas-alarme-services.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1097874 Security Researcher Zodx Helped patch 35 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting eas-alarme-services.fr website and its users. Following...

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services allows a intruder to gain unauthorized access to protected data.

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP...

CVE-2018-3140

Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion subcomponent: EAS Console. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...

CVE-2018-3140

Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion subcomponent: EAS Console. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Essbase...

CVE-2018-3142

CVE-2018-3142 affects Oracle Hyperion Essbase Administration Services (EAS Console) version 11.1.2.4. The vulnerability resides in EAS Console and can be exploited by a low-privilege attacker with network access via HTTP to compromise the Hyperion EAS Services. CVSSv3.0 base score is 7.7 (Confide...

CVE-2018-3140

CVE-2018-3140 affect: Oracle Hyperion Essbase Administration Services (EAS) Console, part of Hyperion Essbase Administration Services. The vulnerability is exploitable via HTTP without authentication on affected 11.1.2.4 deployments. Successful exploitation can lead to unauthorized update/insert/...

Unspecified Vulnerability in Oracle Hyperion Essbase Administration Services

Oracle Hyperion Essbase Administration Services is a cross-platform GUI that makes Essbase administration tasks easy to perform. An unspecified vulnerability exists in the EAS Console component in Oracle Hyperion Essbase Administration Services 11.1.2.4. An attacker could exploit unauthorized...

Unspecified Vulnerability in Oracle Hyperion Essbase Administration Services (CNVD-2019-38560)

Oracle Hyperion Essbase Administration Services is a cross-platform GUI that makes Essbase administration tasks easy to perform. An unspecified vulnerability exists in the EAS Console component in Oracle Hyperion Essbase Administration Services 11.1.2.4. An attacker can exploit this vulnerability...

Unspecified Vulnerability in Oracle Hyperion Essbase Administration Services (CNVD-2019-38561)

Oracle Hyperion Essbase Administration Services is a cross-platform GUI that makes Essbase administration tasks easy to perform. An unspecified vulnerability exists in the EAS Console component in Oracle Hyperion Essbase Administration Services 11.1.2.4. An attacker could exploit this vulnerabili...

eas-heuer.de XSS vulnerability

Open Bug Bounty ID: OBB-659948 Description| Value ---|--- Affected Website:| eas-heuer.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Default credentials

An issue was discovered in Zoho ManageEngine Desktop Central before 100251. By leveraging access to a log file, a context-dependent attacker can obtain depending on the modules configured the Base64 encoded Password/Username of AD accounts, the cleartext Password/Username and mail settings of the...

CVE-2018-2376

In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space...

How to collect ActiveSync device logs (EAS logs) from Exchange

...

Trend Micro Mobile Security for Enterprise remove_eas_agent_info SlinkId SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Mobile Security for Enterprise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the easagentregister action. When parsing...

Fedora 25 : php-horde-Horde-Core (2016-866713edaf)

HordeCore 2.26.1 - jan SECURITY: Add CSRF protection tokens to portal layout forms and fix open URL redirection Reported by Florian Kllich. - jan SECURITY: enable CSRF token for configuration form again Reported by Dawid Gounski via Beyond Security's SecuriTeam Secure Disclosure program. - mjr...

Fedora 24 : php-horde-Horde-Core (2016-559248f95a)

HordeCore 2.26.1 - jan SECURITY: Add CSRF protection tokens to portal layout forms and fix open URL redirection Reported by Florian Kllich. - jan SECURITY: enable CSRF token for configuration form again Reported by Dawid Gounski via Beyond Security's SecuriTeam Secure Disclosure program. - mjr...

Sophos Mobile Control EAS Proxy Information Disclosure Vulnerability

Sophos EMM Enterprise Mobility Management platform is a set of solutions from Sophos UK for managing and securing enterprise mobile devices.Sophos EAS Proxy for Sophos Mobile Control is one of the components that supports access control of email via mobile devices. Sophos EAS Proxy for Sophos...