CVE-2014-4624

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call...

CVE-2014-6557

Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to End User Experience Management...

CVE-2014-6488

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 10.2.0.5, 11.1.0.1 EM DB Control: 11.1.0.7, 11.2.0.3, 11.2.0.4 EM Plugin for DB: 12.1.0.4, 12.1.0.5, and 12.1.0.6 allows remote authenticated users to affe...

Design/Logic Flaw

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 10.2.0.5, 11.1.0.1 EM DB Control: 11.1.0.7, 11.2.0.3, 11.2.0.4 EM Plugin for DB: 12.1.0.4, 12.1.0.5, and 12.1.0.6 allows remote authenticated users to affe...

Design/Logic Flaw

Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to End User Experience Management...

CVE-2014-6557

Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to End User Experience Management...

CVE-2014-6488

CVE-2014-6488 affects Oracle Enterprise Manager components (Grid Control EM Base Platform: 10.2.0.5, 11.1.0.1; EM DB Control: 11.1.0.7, 11.2.0.3, 11.2.0.4; EM Plugin for DB: 12.1.0.4–12.1.0.6) in the Content Management sub-component. The vulnerability is described as unspecified with remote authe...

CVE-2014-6557

CVE-2014-6557 affects Oracle Enterprise Manager Grid Control’s Application Performance Management (APM) component, prior to version 12.1.0.6.2. The vulnerability is described as unspecified, allowing remote authenticated users to impact confidentiality and integrity via unknown vectors related to...

CVE-2014-6488: Undefined Security Weakness

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform: 10.2.0.5, 11.1.0.1 EM DB Control: 11.1.0.7, 11.2.0.3, 11.2.0.4 EM Plugin for DB: 12.1.0.4, 12.1.0.5, and 12.1.0.6 allows remote authenticated users to affe...

CVE-2014-6557: Undefined Security Weakness

Unspecified vulnerability in the Application Performance Management component in Oracle Enterprise Manager Grid Control before 12.1.0.6.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to End User Experience Management...

PT-2014-7289

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions prior to 12.1.0.6.2 Description The issue affects the confidentiality and integrity of the system, allowing remote authenticated users to exploit it. The vulnerability is related to the End User...

PT-2014-7250

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control EM Base Platform versions 10.2.0.5 Oracle Enterprise Manager Grid Control EM DB Control versions 11.1.0.7, 11.2.0.3, 11.2.0.4 Oracle Enterprise Manager Grid Control EM Plugin for DB versions 12.1.0.4,...

Sql injection

SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows remote authenticated users to execute arbitrary SQL commands via crafted POST data...

PT-2014-6183 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 11.3.0.355 Description: The issue allows remote authenticated users to execute arbitrary SQL commands via crafted POST data, specifically targeting the TrackItWeb/Grid/GetData endpoint. Recommendations: For version...

CVE-2014-4873: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows remote authenticated users to execute arbitrary SQL commands via crafted POST data...

Moderate: Red Hat Security Advisory: Red Hat JBoss Data Grid 6.3.1 update

Red Hat JBoss Data Grid 6.3.1, which fixes one security issue and multiple bugs, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Oracle Solaris Critical Patch Update : jul2014_SRU11_1_19_6_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Enterprise Manager Grid Control subcomponent: Common Agent Container Cacao. Supported versions that are affected are 2.3.1.0, 2.3.1.1, 2.3.1.2, 2.4.0.0,...

RHEL 5 : MRG (RHSA-2013:1851)

An updated Grid component package that fixes multiple security issues is now available for Red Hat Enterprise MRG 2.4 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

RHEL 6 : mongodb and pymongo (RHSA-2013:1170)

Updated mongodb and pymongo packages that fix two security issues and add one enhancement are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

RHEL 6 : MRG (RHSA-2013:1852)

Updated Grid component packages that fix multiple security issues are now available for Red Hat Enterprise MRG 2.4 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whi...