The vulnerability of the IBM Robotic Process Automation software lies in the lack of protection for operational data, which allows attackers to disclose sensitive information.

The vulnerability of the IBM Robotic Process Automation software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the IBM Robotic Process Automation software lies in the lack of protection for operational data, which allows attackers to disclose sensitive information.

The vulnerability of the IBM Robotic Process Automation software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

Fedora: Security Advisory (FEDORA-2023-8e6ae98f81)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent and Acronis CyberProtect 15 software lies in the lack of protection for operational data, allowing attackers to access confidential information.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent and Acronis CyberProtect 15 data protection software lies in the lack of protection for operational data. Exploiting this vulnerability can allow unauthorized actors to gain access to confidential...

Rapid7 doubles down on a platform approach for Vulnerability Risk Management

This week, Rapid7 was named a Strong Performer in The Forrester Wave™: Vulnerability Risk Management, Q3 2023. The report, which included 11 vulnerability risk management vendors, represented Rapid7's inclusion in the Wave report for vulnerability management. We are proud to be recognized for our...

The vulnerability of the FortiSIEM security management system, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the FortiSIEM security management system is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by sending specially crafted HTTP requests...

The vulnerability of the Microsoft Outlook email client, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Microsoft Outlook email client is related to insufficient protection for administrative data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Security Bulletin: IBM Operational Decision Manager August 2023 - Multiple CVEs addressed

Summary IBM Operational Decision Manager is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2022-2047...

The vulnerability of Microsoft Word text editors, which allows attackers to disclose protected information

The vulnerability of Microsoft Word relates to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of Microsoft Excel editors, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Excel spreadsheet editors is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information by opening a specially created file...

The vulnerability of the Crucible code-checking tool and the Fisheye code-searching tool lies in the insufficient protection of operational data, allowing unauthorized access by attackers to protected information.

The vulnerability of the Crucible code-checking tool and the Fisheye code-searching tool is related to insufficient protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CISA Adds Two Known Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-36761 Microsoft Word Information Disclosure Vulnerability CVE-2023-36802 Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability These types of...

The vulnerability of the IBM Aspera Faspex file-sharing application configuration allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM Aspera Faspex file-sharing application lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the online business analytics service IBM Cognos Analytics, related to the lack of protection for operational data, allows a perpetrator to disclose protected information.

The vulnerability of the online business analytics service IBM Cognos Analytics lies in the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to gain access to protected information remotely...

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating system’s operational analysis platform allows a perpetrator to execute arbitrary code and gain increased privileges.

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating system’s operational analysis platform is related to an incorrect initialization of resources when processing the OPENSSLDIR value. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain...

CVE-2023-39511

CVE-2023-39511 affects Cacti (1.2.x) with a Stored XSS in the reporting interface. An authenticated user can poison data stored in the Cacti database via malicious device names configured at /cacti/host.php and rendered on /cacti/reports_admin.php, enabling script execution in admins’ browsers wh...

CISA Adds One Known Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-33246 Apache RocketMQ Command Execution Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant...

CVE-2023-39365

Cacti is an open source operational monitoring and fault management framework. Issues with Cacti Regular Expression validation combined with the external links feature can lead to limited SQL Injections and subsequent data leakage. This issue has been addressed in version 1.2.25. Users are advise...

CVE-2023-39516

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability which allows an authenticated user to poison data stored in the cacti's database. These data will be viewed by administrative cacti...

Design/Logic Flaw

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, users with console access can be redirected to an arbitrary website after a change password performed via a specifically crafted URL. The authchangepassword.php file accepts ref as a URL parameter and...