12 matches found
Unspecified Vulnerability in Oracle Forms
Oracle Forms is a software product for creating screens for interacting with the Oracle database. An unspecified vulnerability exists in the Services component in Oracle Forms 12.2.1.3.0. An attacker could exploit the vulnerability to compromise confidentiality and integrity...
Microsoft SharePoint Server Information Leakage Vulnerability
Microsoft SharePoint Server is the United States Microsoft Microsoft company's set of enterprise business collaboration platform. An information leakage vulnerability exists in the InfoPath Forms Services component of Microsoft SharePoint Server versions 2007 SP3 and 2010 SP2. A remote attacker...
CVE-2015-2556
The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity...
Information disclosure
The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity...
CVE-2015-2556
CVE-2015-2556 is an information-disclosure vulnerability affecting Microsoft SharePoint Server 2007 SP3 and 2010 SP2, arising from how the InfoPath Forms Services component parses DTDs. The root cause is improper handling of XML External Entities (XXE), allowing a remote attacker to read arbitrar...
CVE-2015-2556
The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity...
Microsoft SharePoint Server and Foundation Multiple Vulnerabilities (3096440)
This host is missing an important security update according to Microsoft Bulletin MS15-110. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Unspecified Vulnerability in Oracle Forms Services Subware
Oracle Forms Developer is the ORACLE company provides for the development of Web database applications tool set. A security vulnerability exists in the Oracle Forms Forms Services child that could be exploited by remote attackers to compromise system confidentiality...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Forms component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Forms Services...
Oracle Forms 10g/ 6i/9i/4.5.10/5.0/6.0.8 Services Unauthorized Form Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14319/info Oracle Forms Services is susceptible to an unauthorized form execution vulnerability. Attackers may exploit this vulnerability to execute arbitrary commands with the privileges of the Oracle account under which...
Oracle Application Server Forms Arbitrary System Command Execution (CVE-2005-2372)
Oracle Application Server is a multi-platform solution for developing and deploying enterprise applications and web sites. The server ships with several additional components that extend its functionality. One of such component is the Oracle Forms Services. The Forms Services component allows for...
Oracle Forms 6i9i4.5.105.06.0.810g Services - Unauthorized Form Execution
Oracle Forms 6i9i4.5.105.06.0.810g Services - Unauthorized Form Execution source: https://www.securityfocus.com/bid/14319/info Oracle Forms Services is susceptible to an unauthorized form execution vulnerability. Attackers may exploit this vulnerability to execute arbitrary commands with the...