7034 matches found
CVE-2018-1944
Summary: CVE-2018-1944 affects IBM Security Identity Governance and Intelligence (IGI) Virtual Appliance, specifically versions 5.2 through 5.2.4.1. The root cause is hard-coded credentials (passwords or cryptographic keys) used for inbound authentication, outbound communication to external compo...
The Russian Sleuth Who Outs Moscow's Elite Hackers and Assassins
Roman Dobrokhotov has been playing a dangerous game for a Russian reporter: identifying agents of the GRU military intelligence agency...
The vulnerability of the software tool’s web interface for creating Cisco Unified Intelligence Center reports allows a malicious actor to send arbitrary requests to the vulnerable system via a web browser with user privileges.
The vulnerability of the software interface for creating reports in Cisco Unified Intelligence Center exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to send arbitrary requests to the vulnerable system via a web...
IBM Security Identity Governance and Intelligence Information Disclosure Vulnerability (CNVD-2019-05515)
IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. A security vulnerability exists in IBM Security IGI that ste...
The vulnerability of the Cisco Unified Intelligence Center software’s web interface allows a perpetrator to perform arbitrary actions on the vulnerable device.
The vulnerability of the Cisco Unified Intelligence Center software’s web interface is related to the lack of authentication for HTTP requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on a vulnerable device with user privileges, as long as the user clic...
Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2018-1996)
Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin: Potenti...
Learn How XDR Can Take Breach Protection Beyond Endpoint Security
How do you know whether an attacker has infiltrated your network? Can you really rely on an Endpoint Detection and Response EDR solution to be your go-to technology for identifying security breaches? Endpoint detection and response EDR platform has been an important technology to detect...
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities
Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to multiple security vulnerabilities. There are multiple vulnerabilities fixes to open source libraries distributed with IGI, other less secure algorithms for crypto, xss attacks and click...
CVE-2019-0267
SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, Illuminator Servlet currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application...
CVE-2019-0267
SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, Illuminator Servlet currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application...
Information disclosure
SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, Illuminator Servlet currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application...
CVE-2019-0267
CVE-2019-0267 affects SAP Manufacturing Integration and Intelligence (MII), specifically versions 15.0, 15.1 and 15.2, where the Illuminator Servlet does not provide Anti-XSRF tokens. Root cause: lack of anti-forgery protections in the Illuminator Servlet, which can enable Cross-Site Request Forg...
SAP Manufacturing Integration and Intelligence Cross-Site Request Forgery Vulnerability
SAP Manufacturing Integration and Intelligence MII,xMII is a set of Germany's SAP SAP will be the core of the manufacturing system and enterprise process integration platform system. The system supports the creation of manufacturing engineering, manufacturing execution and enterprise workflow...
SAP Web Intelligence BI LaunchPad Cross-Site Scripting Vulnerability
SAP Web Intelligence BI LaunchPad is a Java- or HTML-based user interface for use in BusinessObjects tools from SAP, Germany. The product is mainly used to perform analytical reporting and data analysis. A cross-site scripting vulnerability in SAP Web Intelligence BI LaunchPad versions 4.10 and...
SAP BusinessObjects Business Intelligence Platform Arbitrary File Upload Vulnerability
SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product has report generation, analysis, data visualization and other functions. An arbitrary file upload vulnerability exists in SAP BusinessObjects...
Ex-US Intelligence Agent Charged With Spying and Helping Iranian Hackers
The United States Department of Justice has announced espionage charges against a former US Air Force intelligence officer with the highest level of top-secret clearance for providing the Iranian government classified defense information after she defected to Iran in 2013. Monica Elfriede Witt ,...
TAU Threat Intelligence Notification: New macOS Malware Variant of Shlayer (OSX) Discovered
Carbon Black’s Threat Analysis Unit TAU recently discovered a new variant of a family of macOS malware which was first discovered in February of 2018 by researchers from Intego. TAU has obtained new samples of this malware and observed downloads of the malware from multiple sites, primarily...
Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2018-10237)
Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin: Potenti...
Cisco Unified Intelligence Center Cross-Site Scripting Vulnerability (CNVD-2020-14718)
Cisco Unified Intelligence Center is the United States Cisco Cisco company's set of Web-based reporting platform. The platform provides reports related to business data and call center data presentation capabilities. A cross-site scripting vulnerability exists in Cisco Unified Intelligence Center...