Lucene search
K

12 matches found

CNVD
CNVD
added 2019/10/16 12:0 a.m.1 views

Unspecified Vulnerability in Oracle Forms

Oracle Forms is a software product for creating screens for interacting with the Oracle database. An unspecified vulnerability exists in the Services component in Oracle Forms 12.2.1.3.0. An attacker could exploit the vulnerability to compromise confidentiality and integrity...

6.1CVSS8.4AI score0.00676EPSS
Exploits0References1
CNVD
CNVD
added 2015/10/15 12:0 a.m.2 views

Microsoft SharePoint Server Information Leakage Vulnerability

Microsoft SharePoint Server is the United States Microsoft Microsoft company's set of enterprise business collaboration platform. An information leakage vulnerability exists in the InfoPath Forms Services component of Microsoft SharePoint Server versions 2007 SP3 and 2010 SP2. A remote attacker...

4.3CVSS6.6AI score0.29573EPSS
Exploits0References1
NVD
NVD
added 2015/10/14 1:59 a.m.17 views

CVE-2015-2556

The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity...

4.3CVSS6.5AI score0.29573EPSS
Exploits0References2
Prion
Prion
added 2015/10/14 1:59 a.m.16 views

Information disclosure

The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity...

4.3CVSS7AI score0.29573EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2015/10/14 1:0 a.m.65 views

CVE-2015-2556

CVE-2015-2556 is an information-disclosure vulnerability affecting Microsoft SharePoint Server 2007 SP3 and 2010 SP2, arising from how the InfoPath Forms Services component parses DTDs. The root cause is improper handling of XML External Entities (XXE), allowing a remote attacker to read arbitrar...

4.3CVSS6.6AI score0.29573EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2015/10/14 1:0 a.m.18 views

CVE-2015-2556

The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity...

6.4AI score0.29573EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2015/10/14 12:0 a.m.33 views

Microsoft SharePoint Server and Foundation Multiple Vulnerabilities (3096440)

This host is missing an important security update according to Microsoft Bulletin MS15-110. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

4.3CVSS6.2AI score0.29573EPSS
Exploits0References5
CNVD
CNVD
added 2015/01/22 12:0 a.m.1 views

Unspecified Vulnerability in Oracle Forms Services Subware

Oracle Forms Developer is the ORACLE company provides for the development of Web database applications tool set. A security vulnerability exists in the Oracle Forms Forms Services child that could be exploited by remote attackers to compromise system confidentiality...

4.3CVSS6.8AI score0.00362EPSS
Exploits0References1
Prion
Prion
added 2015/01/21 7:59 p.m.17 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle Forms component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Forms Services...

4.3CVSS6.1AI score0.00362EPSS
Exploits0References3Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.18 views

Oracle Forms 10g/ 6i/9i/4.5.10/5.0/6.0.8 Services Unauthorized Form Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14319/info Oracle Forms Services is susceptible to an unauthorized form execution vulnerability. Attackers may exploit this vulnerability to execute arbitrary commands with the privileges of the Oracle account under which...

7.1AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2009/11/01 12:0 a.m.1 views

Oracle Application Server Forms Arbitrary System Command Execution (CVE-2005-2372)

Oracle Application Server is a multi-platform solution for developing and deploying enterprise applications and web sites. The server ships with several additional components that extend its functionality. One of such component is the Oracle Forms Services. The Forms Services component allows for...

7.2CVSS7.1AI score0.02589EPSS
Exploits1
exploitpack
exploitpack
added 2005/07/19 12:0 a.m.13 views

Oracle Forms 6i9i4.5.105.06.0.810g Services - Unauthorized Form Execution

Oracle Forms 6i9i4.5.105.06.0.810g Services - Unauthorized Form Execution source: https://www.securityfocus.com/bid/14319/info Oracle Forms Services is susceptible to an unauthorized form execution vulnerability. Attackers may exploit this vulnerability to execute arbitrary commands with the...

0.5AI score
Exploits0
Rows per page
Query Builder