RSA Federated Identity Manager URI Redirection Vulnerability (CNVD-2015-01885)

RSA Federated Identity Manager is a standards-based approach that enables end-users to collaborate with business partners, outsourced service providers, supply chain partners, or across multiple offices or surrogates - all through a single identity and single sign-on. A URI redirection...

CVE-2014-3097

Open redirect vulnerability in IBM Tivoli Federated Identity Manager TFIM 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified...

Open redirect

Open redirect vulnerability in IBM Tivoli Federated Identity Manager TFIM 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified...

Imperva SecureSphere Operations Manager 9.0.0.5 - Multiple Vulnerabilities

No description provided by source. Original: http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt =============================== - Advisory - =============================== Tittle: Imperva SecureSphere Operations Manager - Command Execution Post Authentication & Minor issu...

mysql: unspecified DoS related to Federated (CPU April 2014)

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated...

mysql: unspecified DoS related to Federated (CPU April 2014)

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated...

mysql: unspecified DoS related to Federated (CPU April 2014)

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated...

mysql: unspecified DoS related to Federated (CPU April 2014)

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated...

CVE-2014-2432

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated...

Design/Logic Flaw

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated...

CVE-2014-2432

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated...

CVE-2014-2432

Disclaimer: This data contains information about vulnerable...

CVE-2014-2432

CVE-2014-2432 affects the MySQL Server component of Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier. The unspecified vulnerability relates to the Federated feature and allows remote authenticated users to affect availability via unknown vectors. The MariaDB Nessus entry also references thi...

MySQL 5.6.x < 5.6.16 Multiple Vulnerabilities

The version of MySQL installed on the remote host is version 5.6.x prior to 5.6.16. It is, therefore, affected by vulnerabilities in the following components : - DML - ENFED - Federated - MyISAM - Optimizer - Partition - Privileges - Replication - XML C Tenable Network Security, Inc...

MySQL 5.5.x < 5.5.36 Multiple Vulnerabilities

The version of MySQL installed on the remote host is version 5.5.x prior to 5.5.36. It is, therefore, affected by vulnerabilities in the following components : - ENFED - Federated - Partition - Replication - XML C Tenable Network Security, Inc. include"compat.inc"; if description scriptid73572;...

UBUNTU-CVE-2014-2432

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated...

CVE-2014-2432

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated...

PT-2014-1194 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.35 and earlier Oracle MySQL Server versions 5.6.15 and earlier Description: The issue allows remote authenticated users to affect availability via unknown vectors related to the Federated component. This can...

CVE-2013-5429

The Risk Based Access functionality in IBM Tivoli Federated Identity Manager TFIM 6.2.2 before FP9 and Tivoli Federated Identity Manager Business Gateway TFIMBG 6.2.2 before FP9 does not prevent reuse of One Time Password OTP tokens, which makes it easier for remote authenticated users to complet...

CVE-2013-5429

The CVE-2013-5429 issue affects IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP9 and TFIMBG 6.2.2 before FP9. Vulnerability: Risk Based Access allows reuse of One Time Password (OTP) tokens under certain conditions, enabling a remote authenticated user to complete transactions by lev...