CVE-2021-29357

The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 and LifeTime management console before 11.7.0 allows SSRF for arbitrary outbound HTTP requests...

CVE-2021-29357

The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 and LifeTime management console before 11.7.0 allows SSRF for arbitrary outbound HTTP requests...

CVE-2021-29357

The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 and LifeTime management console before 11.7.0 allows SSRF for arbitrary outbound HTTP requests...

Server side request forgery (ssrf)

The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 and LifeTime management console before 11.7.0 allows SSRF for arbitrary outbound HTTP requests...

CVE-2021-29357

The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 and LifeTime management console before 11.7.0 allows SSRF for arbitrary outbound HTTP requests...

CVE-2021-29357

The CVE-2021-29357 issue is tied to OutSystems Platform Server’s ECT Provider component. Affected versions : OutSystems Platform Server 10 prior to 10.0.1104.0 and 11 prior to 11.9.0, as well as LifeTime management console prior to 11.7.0. Vulnerability : Server-side request forgery (SSRF) enable...

PT-2021-18178

Name of the Vulnerable Software and Affected Versions: OutSystems Platform Server versions 10.0.0 through 10.0.1103.0 OutSystems Platform Server versions 11.0.0 through 11.8.0 LifeTime management console versions prior to 11.7.0 Description: The issue allows for Server-Side Request Forgery SSRF...

CVE-2021-29357: Server-Side Request Forgery (SSRF)

The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 and LifeTime management console before 11.7.0 allows SSRF for arbitrary outbound HTTP requests...

CVE-2020-9412

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO...

CVE-2020-9411

CVE-2020-9411 affects TIBCO Managed File Transfer Platform Server for IBM i, specifically the file transfer component. The issue allows unauthorized network file transfers to/from the file system when the configuration option Require Node Resp is set to No, potentially enabling reading/writing of...

CVE-2020-9411

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows an attacker to perform unauthorized network file transfers to and from the file system accessible to the affected component. This...

PT-2020-4418

Name of the Vulnerable Software and Affected Versions: TIBCO Managed File Transfer Platform Server for IBM i versions 7.1.0 and below TIBCO Managed File Transfer Platform Server for IBM i version 8.0.0 Description: The issue is related to insufficient input validation in the file transfer compone...

PT-2020-4419

Name of the Vulnerable Software and Affected Versions: TIBCO Managed File Transfer Platform Server for IBM i versions 7.1.0 and below TIBCO Managed File Transfer Platform Server for IBM i version 8.0.0 Description: The issue is related to errors in the authentication request handling mechanism of...

CVE-2020-9412: Undefined Security Weakness

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows execution of arbitrary commands at the privilege level of the affected system following a failed file transfer. Affected releases are TIBCO...

CVE-2020-9411: Undefined Security Weakness

The file transfer component of TIBCO Software Inc.'s TIBCO Managed File Transfer Platform Server for IBM i contains a vulnerability that theoretically allows an attacker to perform unauthorized network file transfers to and from the file system accessible to the affected component. This...

TIBCO Security Advisory: June 9, 2020 - TIBCO Managed File Transfer PlatformServer for IBMi

TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution Original release date: June 9,2020 Last revised: CVE-2020-9412 Source: TIBCO Software Inc. TIBCO Managed File Transfer Platform Server for IBM i Arbitrary Command Execution Original release date: June 9, 2020 Last...

CVE-2020-9501

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in...

CVE-2018-2473

SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient 3 tiers mode gateway allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

CVE-2018-2473: Undefined Security Weakness

SAP BusinessObjects Business Intelligence Platform Server, versions 4.1 and 4.2, when using Web Intelligence Richclient 3 tiers mode gateway allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

PT-2018-15589

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform Server versions 4.1 and 4.2 Description The issue allows an attacker to prevent legitimate users from accessing a service by either crashing or flooding it, specifically when Web Intelligence...