CVE-2017-9278

The CVE-2017-9278 entry relates to the NetIQ Identity Manager Oracle EBS driver. Affected component: Oracle EBS driver (NetIQ Identity Manager) prior to version 4.0.2.0. Root cause: the driver logs could contain the driver authentication password, which may be disclosed to any attacker able to re...

ebs.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-500545 Description| Value ---|--- Affected Website:| ebs.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Oracle Patches 250 Bugs in Quarterly Critical Patch Update

Oracle patched 250 vulnerabilities across hundreds of different products as part of its quarterly Critical Patch Update released today. Rounding out the list of products with the most patches is Oracle Fusion Middleware with 38, Oracle Hospitality Applications with 37 and Oracle MySQL with 25. Of...

Oracle E-Business Suite 12.x - Server-Side Request Forgery

Exploit Title: Oracle E-Business Suite - Server Side Request Forgery Date: 19 July 2017 Exploit Author: Sarath Nair aka AceNeon13 Contact: @AceNeon13 Greetings: Raj3sh.tv, Deepu.tv Vendor Homepage: www.oracle.com Software Link:...

Multiple Vulnerabilities in Wordpress Themes Ebs

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A file upload and cross-site request forgery vulnerability exists in Wordpress Themes Ebs, which can be exploited by remote attackers to...

Fedora 25 : cloud-init (2017-837115524e)

This update fixes a systemd service ordering issue in cloud-init and backports a fix for a security issue in which instances run in EC2 write IAM instance profile credentials to disk. To work around the security issue without updating cloud-init, wait at least six hours between creating a bundle ...

CVE-2017-3425

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-3428

CVE-2017-3428 affects Oracle E-Business Suite, Oracle One-to-One Fulfillment User Interface. Affected versions: 12.1.1–12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment; attacks may lead to unauthorized access to ...

Code injection

Unspecified vulnerability in the Application Management Pack for Oracle E-Business Suite component in Oracle E-Business Suite AMP 121030 and 121020 allows local users to affect confidentiality via vectors related to EBS Plugin...

CVE-2015-0489

Technical details for CVE-2015-0489 are not publicly available in the provided documents. Monitor for updates in connected sources.

CVE-2015-0489

Unspecified vulnerability in the Application Management Pack for Oracle E-Business Suite component in Oracle E-Business Suite AMP 121030 and 121020 allows local users to affect confidentiality via vectors related to EBS Plugin...

Amazon: Faulty Upgrade Caused EC2 Outtage

Amazon’s multi day outtage on its Elastic Computer Cloud EC2 started with a faulty upgrade to one of its East Coast facility just after midnight on April 21, the company admitted in a blog post on Thursday. The network change, described as part of “normal AWS Amazon Web Services scaling activity,...

Solaris 7 (x86) : 120652-01

Sun StorEdge EBS 7.2x86 Product Patch SU1. Date this patch was last updated by Sun : Jan/27/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 120652-01 (deprecated)

Sun StorEdge EBS 7.2x86 Product Patch SU1. Date this patch was last updated by Sun : Jan/27/06 This plugin has been deprecated and either replaced with individual 120652 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Solaris 10 (sparc) : 120653-01 (deprecated)

Sun StorEdge EBS 7.2L: Product Patch SU1. Date this patch was last updated by Sun : Jan/27/06 This plugin has been deprecated and either replaced with individual 120653 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabl...

Solaris 8 (sparc) : 120651-01

Sun StorEdge EBS 7.2: Product Patch SU1. Date this patch was last updated by Sun : Jan/27/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 120650-01

Sun StorEdge EBS 7.2: Product Patch SU1. Date this patch was last updated by Sun : Jan/27/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 7 (sparc) : 120653-01

Sun StorEdge EBS 7.2L: Product Patch SU1. Date this patch was last updated by Sun : Jan/27/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 7 (sparc) : 120650-01

Sun StorEdge EBS 7.2: Product Patch SU1. Date this patch was last updated by Sun : Jan/27/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 120650-01

Sun StorEdge EBS 7.2: Product Patch SU1. Date this patch was last updated by Sun : Jan/27/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...