CVE-2015-0426

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework...

CVE-2015-0426

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework...

Code injection

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework...

CVE-2015-0426

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework...

CVE-2015-0426

CVE-2015-0426 affects Oracle Enterprise Manager Grid Control (Enterprise Manager Cloud Control) Base Platform UI Framework in versions 12.1.0.3 and 12.1.0.4. The vulnerability is described as an unspecified issue that allows remote attackers to affect confidentiality via unknown vectors related t...

Code injection

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 11.1.3 and 12.1.4 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework...

CVE-2014-6573

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 11.1.3 and 12.1.4 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework...

CVE-2014-6573

CVE-2014-6573 affects Oracle Enterprise Manager Grid Control’s Ops Center UI Framework in version 11.1.3 and 12.1.4. The vulnerability is described as an unspecified issue in the User Interface Framework that could allow remote attackers to impact integrity via unknown vectors. The NVD entry list...

PT-2015-4633

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.1.0.3 through 12.1.0.4 Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors related to the UI Framework in the Enterprise Manager Base...

PT-2015-3881

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 11.1.3 through 12.1.4 Description The issue affects the integrity of the system, related to the User Interface Framework in the Enterprise Manager Ops Center component. Recommendations For versio...

CVE-2015-0426: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 12.1.0.3 and 12.1.0.4 allows remote attackers to affect confidentiality via unknown vectors related to UI Framework...

CVE-2014-6573: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 11.1.3 and 12.1.4 allows remote attackers to affect integrity via unknown vectors related to User Interface Framework...

PT-2015-3643

Name of the Vulnerable Software and Affected Versions LicensePal ArcticDesk versions prior to 1.2.5 Description A SQL injection issue exists in the ticket grid of the admin interface, allowing remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.2.5, update ...

Design/Logic Flaw

The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors...

CVE-2014-6138

CVE-2014-6138 affects IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4. Remote authenticated users can bypass intended grid-data access restrictions via unspecified vectors. The documents do not disclose the root cause or a confirmed exploit path. Affected product/versions are specif...

CVE-2014-6138: Exposure of Sensitive Information to an Unauthorized Actor

The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors...

RHEL 5 : MRG (RHSA-2014:0350)

This is the final notification for the retirement of Red Hat Enterprise MRG Version 1 for Red Hat Enterprise Linux 5. This notification applies only to those customers with subscriptions for Red Hat Enterprise MRG Version 1 for Red Hat Enterprise Linux 5. In accordance with the Red Hat Enterprise...

Cyberespionage: 'This Isn't a Problem That Can Be Solved'

WASHINGTON–Gentlemen may not read each other’s mail, as Henry Stimson famously said so long ago, but in today’s world they certainly steal it and there’s precious little in the way of gentlemanly conduct happening in the realm of cyberespionage. It’s every man—or country—for himself in this...

Government, Industry Focusing on Issue of Resiliency

WASHINGTON–As things stand right now, the United States has no overarching national information security policy or centralized agency responsible for defending the government’s networks in the event of a serious cyberattack. There have been many pushes over the years to change that and put one...

Authentication flaw

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call...