259 matches found
CVE-2015-0372
Technical details for CVE-2015-0372 are not publicly available in the provided documents; no affected product/version or root cause is specified here. Monitor for updates.
SAP NetWeaver 7.4 (Pmitest servlet) - XSS vulnerability
Application: SAP NetWeaver Versions Affected: SAP NetWeaver 7.4 Vendor URL: http://www.sap.com Bugs: XSS Reported: 01.09.2015 Vendor response: 02.09.2015 Date of Public Advisory: 12.01.2016 Reference: SAP Security Note 2234918 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION Class:...
Macromedia Sitespring 1.2 Default Error Page Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5249/info Macromedia Sitespring is a J2EE-compliant product for managing website production. The Macromedia Sitespring server runs on Microsoft Windows operating systems. A cross-site scripting issue has been reported in...
Oracle Containers for J2EE Detection
Binary data oc4jdetect.nbin...
Oracle Containers for J2EE Multiple Unspecified HTTP Vulnerabilities (April 2014 CPU)
The remote install of Oracle Containers for J2EE is missing a vendor-supplied update. It is, therefore, affected by multiple, unspecified vulnerabilities related to how HTTP requests are handled. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
CVE-2014-0426
Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0413...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0426...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0413...
CVE-2014-0426
Technical details for CVE-2014-0426 are not publicly provided in the supplied documents. No explicit affected product version, root cause, or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2014-0413
CVE-2014-0413 affects Oracle Fusion Middleware 10.1.3.5’s Oracle Containers for J2EE component. The vulnerability arises in HTTP request handling, enabling remote attackers to impact integrity. This entry is a separate issue from CVE-2014-0426. Connected sources confirm affected product/component...
CVE-2014-0414
CVE-2014-0414 affects Oracle Containers for J2EE (Oracle Fusion Middleware 10.1.3.5). The connected sources describe a null byte injection vulnerability in the path handling when transferring a request to another static page or JSP via pageContext.forward or jsp:forward, which can lead to script ...
CVE-2013-7364
An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows remote attackers to read and write to arbitrary files via unknown vectors...
CVE-2013-7355
SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to the J2EE schema...
CVE-2013-7357
Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential information via unknown vectors...
Design/Logic Flaw
Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential information via unknown vectors...
Sql injection
SQL injection vulnerability in SAP BI Universal Data Integration allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to the J2EE schema...
CVE-2013-7364
SAP NetWeaver’s J2EE Engine contains an unspecified J2EE core service that does not properly restrict access. This allows remote attackers to read and write to arbitrary files via unknown vectors. Affected component: J2EE Engine (SAP NetWeaver). Root cause: inadequate access restrictions in a cor...
CVE-2013-7357
Technical details about CVE-2013-7357 are not provided in the connected documents; no specifics on affected SAP J2EE Engine components, vectors, or remediation are available. Monitor for updates.
