ROS-20260810-73-0010

The vulnerability of the Networking component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to...

ZTE MU5250 Wi-Fi Router Information Disclosure

The vulnerability of ZTE MU5250 Wi-Fi router microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

FinOps tool Microsoft Cost Management Information Disclosure

The vulnerability of the FinOps tool for analysis, forecasting, budget limiting, and resource cost optimization in Microsoft Cost Management is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Oracle WebLogic Server Unauthorized Access

The vulnerability of the Web Services component of the Oracle WebLogic Server application server is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through HTTP...

Prisma Access Agent Unprotected Data Access

The vulnerability of the Prisma Access Agent, a user remote access agent, relates to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Power Automate for Desktop Information Disclosure

The vulnerability of the Power Automate for Desktop automation platform is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Security Component Data Read Modify Delete

The vulnerability of the Security component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to...

IBM Planning Analytics Local Unauthorized Access

The vulnerability of the IBM Planning Analytics Local software is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Cisco Catalyst SD-WAN Manager Info Disclosure

The vulnerability of the centralized network management system, Cisco Catalyst SD-WAN Manager, is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by this system...

liboqs Operational Data Access

The vulnerability of the liboqs implementation library for post-quantum cryptography lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to the protected information...

ZenCount visitor counter Data Compromise

The vulnerability of the ZenCount visitor counter is related to insufficient protection for operational data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...

Microsoft Dynamics 365 Info Disclosure

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection for operational data. Exploiting this vulnerability can allow attackers to disclose sensitive information...

MFlash file-sharing platform Information Disclosure

The vulnerability of the MFlash file-sharing platform is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

MFlash file-sharing platform Information Disclosure

The vulnerability of the MFlash file-sharing platform is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

SINEC Traffic Analyzer Unauthorized Access

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks is related to insufficient protection of operational data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

Apache Airflow Data Access Unauthorized Access

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Apache Airflow is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

TrackPoint Quick Menu Privilege Escalation

The vulnerability of the TrackPoint Quick Menu software is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to enhance their privileges...

PERCo-Web access control system Unauthorized Access

The vulnerability of the PERCo-Web access control system is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Microsoft Dynamics 365 Info Disclosure

The vulnerability of the Microsoft Dynamics 365 resource planning software relates to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Apache CloudStack Operational Data Protection

The vulnerability of the software platform that manages virtual machine environments in Apache CloudStack is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected...