CVE-2023-22029

Oracle Commerce Guided Search (Workbench) vulnerability tracked as CVE-2023-22029 affects version 11.3.2. The issue stems from insufficient input validation in the Workbench component, allowing an unauthenticated attacker with network access over HTTP to compromise the product. Attacks require us...

PT-2023-6271 · Oracle · Oracle Commerce Guided Search

Name of the Vulnerable Software and Affected Versions: Oracle Commerce Guided Search version 11.3.2 Description: The issue is related to insufficient input validation in the Workbench component of Oracle Commerce Guided Search. This easily exploitable vulnerability allows an unauthenticated...

CVE-2023-22029: Undefined Security Weakness

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce component: Workbench. The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guided Search. Successf...

Oracle Commerce Security Vulnerability

Oracle Commerce is a suite of e-business solutions from Oracle Corporation. A security vulnerability exists in Oracle Commerce's Oracle Commerce Guided Search version 11.3.2, which originated from a vulnerability that could allow an unauthenticated attacker to compromise Oracle Commerce Guided...

F5 Networks BIG-IP APM Guided Configuration Information Disclosure (K47756555)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.0 / 16.1.4 / 15.1.8. It is, therefore, affected by a vulnerability as referenced in the K47756555 advisory. When BIG-IP APM Guided Configuration is configured, undisclosed sensitive information may be logged in the...

CVE-2023-39447

When BIG-IP APM Guided Configurations are configured, undisclosed sensitive information may be logged in restnoded log. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-39447 BIG-IP APM Guided Configuration vulnerability

When BIG-IP APM Guided Configurations are configured, undisclosed sensitive information may be logged in restnoded log. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-39447 BIG-IP APM Guided Configuration vulnerability

When BIG-IP APM Guided Configurations are configured, undisclosed sensitive information may be logged in restnoded log. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-39447

CVE-2023-39447 affects F5 BIG-IP APM Guided Configuration. When Guided Configuration is enabled, undisclosed sensitive information can be logged in the restnoded log. The vulnerability allows a high-privilege authenticated user with local access to read sensitive data. Affected BIG-IP APM/Guided ...

K47756555: BIG-IP APM Guided Configuration vulnerability CVE-2023-39447

Security Advisory Description When BIG-IP APM Guided Configuration is configured, undisclosed sensitive information may be logged in the restnoded log file. CVE-2023-39447 Impact This vulnerability may allow a high privileged authenticated attacker with local access to the BIG-IP system to read...

CVE-2023-39447: Insertion of Sensitive Information into Log File

When BIG-IP APM Guided Configurations are configured, undisclosed sensitive information may be logged in restnoded log. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

PT-2023-26952

Name of the Vulnerable Software and Affected Versions BIG-IP APM affected versions not specified Description When BIG-IP APM Guided Configurations are configured, undisclosed sensitive information may be logged in the restnoded log. Note that software versions which have reached End of Technical...

CVE-2023-41367

Due to missing authentication check in webdynpro application, an unauthorized user in SAP NetWeaver Guided Procedures - version 7.50, can gain access to admin view of specific function anonymously. On successful exploitation of vulnerability under specific circumstances, attacker can view user’s...

CVE-2023-41367 Missing Authentication check in SAP NetWeaver (Guided Procedures)

Due to missing authentication check in webdynpro application, an unauthorized user in SAP NetWeaver Guided Procedures - version 7.50, can gain access to admin view of specific function anonymously. On successful exploitation of vulnerability under specific circumstances, attacker can view user’s...

CVE-2023-41367: Missing Authentication for Critical Function

Due to missing authentication check in webdynpro application, an unauthorized user in SAP NetWeaver Guided Procedures - version 7.50, can gain access to admin view of specific function anonymously. On successful exploitation of vulnerability under specific circumstances, attacker can view user’s...

PT-2023-27930

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Guided Procedures version 7.50 Description The issue is caused by a missing authentication check in the webdynpro application, allowing an unauthorized user to gain access to the admin view of a specific function anonymously. Und...

Alert Prioritization and Guided Remediation: The future of EDR

Sleepless nights, missed threats, a deluge of notifications--the common symptoms of the bane of IT teams everywhere: Alert fatigue. Out of the litany of problems IT teams face every day, alert fatigue might be among the most pressing--especially considering that 30 percent of EDR alerts are ignor...

Introducing AI-guided Remediation for IaC Security / KICS

While the use of Infrastructure as Code IaC has gained significant popularity as organizations embrace cloud computing and DevOps practices, the speed and flexibility that IaC provides can also introduce the potential for misconfigurations and security vulnerabilities. IaC allows organizations to...

Design/Logic Flaw

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, OpenSIPS crashes when a malformed SDP body is received and is processed by the deletesdpline function in the sipmsgops module. This issue can be reproduced by calling the function with an SDP...

CVE-2023-28098 OpenSIPS has vulnerability in the Digest Authentication Parser

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected way due to a bug in the function parseparamname . This issue was discovered while performing coverag...