CVE-2022-21613

Vulnerability in the Oracle Enterprise Data Quality product of Oracle Fusion Middleware component: Dashboard. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2022-21612

CVE-2022-21612 affects Oracle Fusion Middleware’s Oracle Enterprise Data Quality (Dashboard) with affected versions 12.2.1.3.0 and 12.2.1.4.0. A low-privilege attacker can exploit over HTTP to cause unauthorized creation/deletion/modification of data or unauthorized data access. The available con...

CVE-2022-21613

CVE-2022-21613 affects Oracle Fusion Middleware’s Oracle Enterprise Data Quality component (Dashboard). Affected versions are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows unauthenticated attackers with network access via HTTP to compromise Oracle Enterprise Data Quality; successful exploit...

CVE-2022-21615

CVE-2022-21615 affects Oracle Fusion Middleware’s Oracle Enterprise Data Quality product, specifically the Dashboard component. Affected are versions 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated, network-accessible attacker to compromise Oracle Enterprise Data Quality vi...

CVE-2022-21614

CVE-2022-21614 affects Oracle Fusion Middleware’s Oracle Enterprise Data Quality (Dashboard) with affected versions 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated, network-access attacker (HTTP) to access or compromise data, with CVSS v3.1 base score 7.5 (Confidentiality i...

Imperva DSF Secures Your Data in Amazon Web Services Enterprise Data Lakes

Data lakes serve as a central repository for storing several data types - structured, semi-structured, and unstructured - at scale. One of the ways data lakes are useful is they do not require any upfront work on the data. You can simply integrate and store data as it streams in from multiple...

How Organizations Manage to Understand Millions of Unstructured Data Files at Scale

For an ever-growing segment of organizations, making sense of unstructured data is fast becoming imperative. It is also far more challenging. Unlike structured data that’s stored in rows and columns, text-based, and easy to search in relational databases and data warehouses, there is no defined...

CVE-2022-30496

SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information...

CVE-2022-30496

SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information...

MV Informática IDCE MV SQL注入漏洞

MV Informática IDCE MV is a health management software from the Brazilian company MV Informática. MV Informática IDCE MV version 1.0 contains a SQL injection vulnerability that stems from a SQL injection issue in the user field of the login page. An attacker could exploit the vulnerability to...

The vulnerability of the AVEVA System Platform, a software for managing production processes; AVEVA WorkTasks, software for decision-making support on mobile devices; AVEVA Mobile Operator, a system for operational production management; AVEVA Manufacturing Execution System, software for integrated production management; AVEVA Batch Management, software for batch-based production control; AVEVA Enterprise Data Management, a software platform for enterprise data management. This vulnerability is related to an uncontrolled element in the search process, allowing attackers to escalate their privileges.

The vulnerabilities of the AVEVA System Platform, which is used for dispatching control applications; AVEVA WorkTasks, which is software for managing production processes; AVEVA Mobile Operator, which is software for supporting decision-making on mobile devices; AVEVA Manufacturing Execution...

Tibco Ebx 授权问题漏洞

Tibco Ebx is a software from Tibco India that supports integration to manage enterprise data assets. An authorization issue vulnerability exists in TIBCO EBX Web Server, which arises from a problem with the software's validation of user-submitted passwords, which could be exploited to allow an...

Protecting SAP applications with the new Azure Sentinel SAP threat monitoring solution

As one of the leading solution providers for applications that manage business processes, SAP is the custodian for massive amounts of sensitive data in many of the biggest organizations in the world. Since these applications are business-critical, an SAP security breach can be catastrophic. Yet,...

Protecting SAP applications with the new Azure Sentinel SAP threat monitoring solution

As one of the leading solution providers for applications that manage business processes, SAP is the custodian for massive amounts of sensitive data in many of the biggest organizations in the world. Since these applications are business-critical, an SAP security breach can be catastrophic. Yet,...

The vulnerability of the AVEVA Enterprise Data Management Web (eDNA Web) software platform, related to the lack of measures taken to protect the SQL query structure, allows a hacker to execute arbitrary SQL commands.

The vulnerability of the AVEVA Enterprise Data Management Web eDNA Web software platform is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

SAP Business Information Warehouse SQL Injection Vulnerability

SAP Business Information Warehouse SAP BW is a data warehouse for collecting and tabulating information in an enterprise environment from SAP Germany. The software is an enterprise-wide information center for data analysis from R / 3 and other business applications, including databases and extern...

CVE-2020-25507

An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root. During installation, the user is instructed to set the system enviroment file with world writable permissions 0777...

Code injection

An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root. During installation, the user is instructed to set the system enviroment file with world writable permissions 0777...

CVE-2020-25507

CVE-2020-25507 affects TeamworkCloud 18.0–19.0. The installation script incorrectly assigns permissions, enabling a local unprivileged user to write to /etc/environment (0777) and to the twcloud user’s home at /home/twcloud, causing all users (including root) to execute arbitrary code on next log...

CVE-2020-25507

An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root. During installation, the user is instructed to set the system enviroment file with world writable permissions 0777...