10 matches found
CVE-2021-29267
Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting XSS by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature...
CVE-2021-29267
Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting XSS by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature...
PT-2021-18155
Name of the Vulnerable Software and Affected Versions: SherlockIM through 2021-03-29 Description: The issue allows Cross Site Scripting XSS by leveraging the "api/Files/Attachment" URI to attack help-desk staff via the chatbot feature. Recommendations: For versions through 2021-03-29, consider...
CVE-2021-29267: Improper Neutralization of Input During Web Page Generation
Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting XSS by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature...
CVE-2013-3825
Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders & Files Attachment...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders & Files Attachment...
CVE-2013-3825
CVE-2013-3825 concerns the Oracle Agile Product Collaboration component within Oracle Supply Chain Products Suite 9.3.1. The description states an unspecified vulnerability that allows remote authenticated users to affect confidentiality via unknown vectors related to Folders & Files Attachment. ...
CVE-2013-3825
Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders & Files Attachment...
PT-2013-4662
Name of the Vulnerable Software and Affected Versions Oracle Supply Chain Products Suite version 9.3.1 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to Folders & Files Attachment in the Oracle Agile Product Collaborati...
CVE-2013-3825: Exposure of Sensitive Information to an Unauthorized Actor
Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders & Files Attachment...