8668 matches found
Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2019-10086)
Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...
VirusTotal Adds Cynet's Artificial Intelligence-Based Malware Detection
VirusTotal, the famous multi-antivirus scanning service owned by Google, recently announced new threat detection capabilities it added with the help of an Israeli cybersecurity firm. VirusTotal provides a free online service that analyzes suspicious files and URLs to detect malware and...
VirusTotal Adds Cynet's Artificial Intelligence-Based Malware Detection
VirusTotal, the famous multi-antivirus scanning service owned by Google, recently announced new threat detection capabilities it added with the help of an Israeli cybersecurity firm. VirusTotal provides a free online service that analyzes suspicious files and URLs to detect malware and...
Information Builders WebFOCUS Business Intelligence Cross-Site Request Forgery Vulnerability
Information Builders WebFOCUS Business Intelligence BI is a suite of business intelligence and analytics platforms from Information Builders, Inc. in the United States. The platform provides data analysis tools, applications, reporting and document generation. Information Builders WebFOCUS Busine...
Information Builders WebFOCUS Business Intelligence XML External Entity Injection Vulnerability
Information Builders WebFOCUS Business Intelligence BI is a suite of business intelligence and analytics platforms from Information Builders, Inc. in the United States. The platform provides data analysis tools, applications, reporting and document generation. Information Builders WebFOCUS Busine...
Information Builders WebFOCUS Business Intelligence Cross-Site Scripting Vulnerability
Information Builders WebFOCUS Business Intelligence BI is a suite of business intelligence and analytics platforms from Information Builders, Inc. in the United States. The platform provides data analysis tools, applications, reporting and document generation. A cross-site scripting vulnerability...
Hackers Leaked 269 GB of U.S. Police and Fusion Centers Data Online
A group of hacktivists and transparency advocates has published a massive 269 GB of data allegedly stolen from more than 200 police departments, fusion centers, and other law enforcement agencies across the United States. Dubbed BlueLeaks, the exposed data leaked by the DDoSecrets group contains...
CVE-2020-14202
WebFOCUS Business Intelligence 8.0 SP6 was prone to XSS via arbitrary URL parameters...
CVE-2020-14203
WebFOCUS Business Intelligence 8.0 SP6 allows a Cross-Site Request Forgery CSRF attack against administrative users within the /ibiapps/WFServlet.ibfs endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044...
CVE-2020-14204
In WebFOCUS Business Intelligence 8.0 SP6, the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibiapps/WFServlet.cfg because XML external entity injection is possible. This is related to making changes t...
CVE-2020-14202
WebFOCUS Business Intelligence 8.0 SP6 was prone to XSS via arbitrary URL parameters...
Design/Logic Flaw
WebFOCUS Business Intelligence 8.0 SP6 was prone to XSS via arbitrary URL parameters...
CVE-2020-14202
WebFOCUS Business Intelligence 8.0 (SP6) is affected by CVE-2020-14202: an XSS vulnerability via arbitrary URL parameters in WebFOCUS BI. The root cause is insufficient input sanitization/cleanup, allowing script execution in the context of the affected site. Impact is cross-site scripting; no ex...
CVE-2020-14202
WebFOCUS Business Intelligence 8.0 SP6 was prone to XSS via arbitrary URL parameters...
CVE-2020-14204
CVE-2020-14204 affects WebFOCUS Business Intelligence 8.0 (SP6). The vulnerability is XML External Entity Injection in the WebFOCUS BI XML processing, enabling remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibi_apps/WFServlet.cfg. ...
CVE-2020-14203
WebFOCUS Business Intelligence 8.0 (SP6) is affected by CVE-2020-14203, a Cross-Site Request Forgery (CSRF) vulnerability in the /ibi_apps/WFServlet(.ibfs) endpoint. The issue can enable creation of an administrative user and is connected to CVE-2016-9044. Multiple connected sources confirm a CSR...
PT-2020-13928
Name of the Vulnerable Software and Affected Versions WebFOCUS Business Intelligence version 8.0 SP6 Description The issue allows for cross-site scripting XSS attacks via arbitrary URL parameters. Recommendations For WebFOCUS Business Intelligence version 8.0 SP6, consider restricting access to...
CVE-2020-14204: Improper Restriction of XML External Entity Reference
In WebFOCUS Business Intelligence 8.0 SP6, the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibiapps/WFServlet.cfg because XML external entity injection is possible. This is related to making changes t...
CVE-2020-14203: Cross-Site Request Forgery (CSRF)
WebFOCUS Business Intelligence 8.0 SP6 allows a Cross-Site Request Forgery CSRF attack against administrative users within the /ibiapps/WFServlet.ibfs endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044...