CVE-2022-21500

CVE-2022-21500 affects Oracle E-Business Suite, specifically the Manage Proxies component, with the vulnerable line item in 12.2 (12.1 is not impacted). The issue enables an attacker to access or potentially take over data in the Oracle E-Business Suite via HTTP over the network, with CVSSv3.1 ba...

CVE-2022-21354

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks...

InsightCloudSec Supports 12 New AWS Services Announced at re:Invent

In case you didn’t hear, Amazon hosted AWS re:Invent in Las Vegas last week. As has come to be expected at the annual mega-event, Amazon made a number of huge announcements and launched a significant number of improvements and brand-new services and settings to enhance their public cloud platform...

CVE-2021-2406

CVE-2021-2406 affects Oracle E-Business Suite’s Oracle Collaborative Planning product, User Interface component. Affected versions are 12.1.1–12.1.3. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Collaborative Planning, potentially enabling u...

CVE-2021-2398

The CVE-2021-2398 entry covers a vulnerability in Oracle E-Business Suite’s Oracle Advanced Outbound Telephony (Region Mapping) affecting versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue allows a low-privilege, unauthenticated attacker with network access via HTTP to compromise data within Or...

CVE-2021-2259

CVE-2021-2259 affects Oracle E-Business Suite Payables (India Localization, Results). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. An attacker with network access via HTTP and low privileges can compromise Oracle Payables, with potential unauthorized creation/deletion/modification of d...

CVE-2021-2189

CVE-2021-2189 affects Oracle E-Business Suite Sales Offline, Template component, with affected versions 12.1.1–12.1.3 and 12.2.3–12.2.10. An unauthenticated, network-accessible attacker over HTTP can trigger a hang or crash in Oracle Sales Offline (DoS). The vulnerability is documented across mul...

Downloading and Exploring AWS EBS Snapshots

The post Downloading and Exploring AWS EBS Snapshots appeared first on Rhino Security Labs...

CVE-2020-14822

CVE-2020-14822 affects Oracle E-Business Suite Installed Base APIs. Affected are Oracle E-Business Suite versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability is exploitable over HTTP by an unauthenticated, network-reachable attacker and, per the entry, requires user interaction, with pote...

CVE-2020-14811

CVE-2020-14811 affects Oracle E-Business Suite Applications Manager (AMP EBS Integration). Affected versions: 12.1.3 and 12.2.3–12.2.10. An unauthenticated attacker with network access over HTTP can read a subset of Oracle Applications Manager data. The CVSSv3.1 base score is 5.3 (Confidentiality...

CVE-2020-14805

CVE-2020-14805 affects Oracle E-Business Suite Secure Enterprise Search (component: Search Integration Engine). Affected: E-Business Suite 12.1.3 and 12.2.3–12.2.10. Description: unauthenticated attacker with network access over HTTP can compromise the Secure Enterprise Search, potentially causin...

How to work with Amazon EBS encryption using Veeam Backup for AWS

Challenge You want to backup or restore instances with encrypted volumes. You receive one of the following related errors while working with encrypted volumes: Encrypted snapshots with EBS default key cannot be shared The default encryption key in the region of your service account is aws/ebs...

Deploying Veeam Backup for Microsoft 365 Backup Proxy Server in AWS

Challenge You need to configure an Amazon EC2 instance to act as a Backup Proxy for Veeam Backup for Microsoft 365 in AWS. For example, this may be required for the following reasons: The current proxy/deployment has or will reach configuration maximums. Growth within the Organizations. You need ...

CVE-2020-2882

CVE-2020-2882 affects Oracle E-Business Suite Human Resources, component Hierarchy Diagrammers, with impacted versions 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows unauthorized access and data modification in Oracle HR, with CVSS 3.0 base score 8.1 (high). Root cause and exploit deta...

Dufflebag - Search Exposed EBS Volumes For Secrets

Dufflebag is a tool that searches through public Elastic Block Storage EBS snapshots for secrets that may have been accidentally left in. You may be surprised by all the passwords and secrets just laying around! The tool is organized as an Elastic Beanstalk "EB", not to be confused with EBS...

How to Create Custom Backup Policy IAM Role

The Backup Policy IAM role is used to run the following backup operations: Enumerating of the resources.Taking EBS snapshots of selected EC2 instances volumes.Creating volumes from snapshots.Attaching...

CVE-2019-2653

CVE-2019-2653 is a vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (Print Server). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, and 12.2.8. The issue allows an unauthenticated attacker with network access via HTT...

Cloud Custodian - Rules Engine For Cloud Security, Cost Optimization, And Governance, DSL In Yaml For Policies To Query, Filter, And Take Actions On Resources

Cloud Custodian is a rules engine for AWS fleet management. It allows users to define policies to enable a well managed cloud infrastructure, that's both secure and cost optimized. It consolidates many of the adhoc scripts organizations have into a lightweight and flexible tool, with unified...

CVE-2018-3017

CVE-2018-3017 affects the Oracle E-Business Suite, specifically the CRM Technical Foundation component (subcomponent: Preferences). Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, and 12.2.7. The vulnerability allows an unauthenticated attacker with network access via H...

Micro Focus NetIQ Identity Manager Oracle EBS Driver Information Disclosure Vulnerability

Micro Focus NetIQ Identity Manager is a suite of identity management solutions from Micro Focus UK. The solution provides the foundation for account provisioning, user self-service, authorization and Web services, and supports data sharing and synchronization.Oracle EBS driver is one of the EBS...