jviews-framework-all.jar Code Execution

The vulnerability of the jviews-framework-all.jar component of the corporate-level platform for extracting, transforming, and loading Jviews data is related to insufficient access control checks for projects. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

PT-2017-4045

Name of the Vulnerable Software and Affected Versions Rogue Wave JViews versions 8.8 through 8.8 patch 20 Rogue Wave JViews versions 8.9 through 8.9 patch 0 Description The issue allows remote attackers to execute arbitrary Java code that exists in the classpath, such as test code or administrati...

CVE-2015-8965: Undefined Security Weakness

Rogue Wave JViews before 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code that exists in the classpath, such as test code or administration code. The issue exists because the ilog.views.faces.IlvFacesController servlet in jviews-framework-all.jar does not...