The vulnerability of the Automated Note Search Tool component of the SAP Basis system management platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Automated Note Search Tool component of the SAP Basis system management platform is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Security component of the Oracle AutoVue data visualization application, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the Security component of the Oracle AutoVue data visualization application relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through the HTTP...

The vulnerability of the sub-component of the Infrastructure component of the Oracle FLEXCUBE Universal Banking banking analytics system, a simulation modeling application of Oracle Financial Services, allows a perpetrator to gain access to read data or modify data.

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking component, a banking analytics system for simulation-based modeling by Oracle Financial Services Applications, is related to the lack of protection for operational data. Exploiting this vulnerability...

The vulnerability of the Oracle PeopleSoft Enterprise PeopleTools Elastic Search component of the Oracle PeopleSoft products allows a perpetrator to gain access to data for reading purposes.

The vulnerability of the Oracle PeopleSoft Enterprise PeopleTools Elastic Search component of the Oracle PeopleSoft products lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain read access to data through HTTP requests...

The vulnerability in the web protection component of Kaspersky’s antivirus and security products, including Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, and Kaspersky Security Cloud, allows attackers to disclose protected information.

The vulnerability of the web protection component of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, and Kaspersky Security Cloud lies in the lack of protection for operational data. Exploiting this...

The vulnerability of the Object Migration sub-component of the Oracle Financial Services Analytical Applications Infrastructure component of the banking analytics system’s simulation model Oracle Financial Services Applications allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Object Migration sub-component of the Oracle Financial Services Analytical Applications Infrastructure banking analytics system’s simulation model involves a lack of protection for operational data. Exploiting this vulnerability allows an attacker, operating remotely, to...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analysis system, a simulation-based financial services application, allows a perpetrator to disclose protected information.

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system, a simulation-based application, relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose...

The vulnerability of the Central Management Console component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Central Management Console component of the SAP BusinessObjects Business Intelligence platform is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...

The vulnerability of the Infrastructure component of the Oracle FLEXCUBE Investor Servicing financial management software allows a hacker to disclose protected information.

The vulnerability of the Infrastructure component of the Oracle FLEXCUBE Investor Servicing financial management software lies in the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to exploit the HTTP protocol...

The vulnerability of the Web Container (JavaServer Faces) component of the Oracle WebLogic Server application server allows a attacker to disclose sensitive information that is protected by security measures.

The vulnerability of the Web Container JavaServer Faces component of the Oracle WebLogic Server application server is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information using the HTTP...

The vulnerability of SAP NetWeaver Application Server Java, related to the lack of protection for operational data, allows attackers to gain unauthorized access to protected information.

The vulnerability of SAP NetWeaver Application Server Java lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Siemens SCALANCE X Switches (Update B)

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE X Switches Vulnerability: Missing Authentication for Critical Function 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

The vulnerability of the server management application for CentOS Web Panel lies in the lack of protection for operational data, allowing attackers to disclose sensitive information.

The vulnerability of the CentOS Web Panel administration application lies in the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

The vulnerability of the Huawei Share file sharing function in the mobile phone Huawei P20’s microprogramming system allows a intruder to disclose protected information.

The vulnerability of the Huawei Share file sharing function in the mobile phone Huawei P20’s microprogramming system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information throug...

The Case for Cyber-Risk Prospectuses

Sometimes our investments lose money. It’s not for lack of trying, indeed most investment firms make money off the growth of our investments. But despite best intentions and detailed investment plans, we sometimes end up with less than that with which we started. This can be due to outside forces...

WAGO PFC200 Information Disclosure Vulnerability

The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. An information disclosure vulnerability exists in the WAGO PFC200. The vulnerability arises from errors such as configuration during operation of a networked system or product. An attacker could exploit this vulnerability t...

The vulnerability of the McAfee Advanced Threat Defense software lies in the lack of protection for operational data, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the McAfee Advanced Threat Defense security tool lies in the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, is related to the lack of protection for operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information through a specially...

Critical Remote Code-Execution Bugs Threaten Global Power Plants

Siemens industrial equipment commonly found in fossil-fuel and large-scale renewable power plants are riddled with multiple security vulnerabilities, the most severe of which are critical bugs allowing remote code-execution. The affected product is SPPA-T3000, a distributed control system used fo...