CVE-2018-2724

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2712

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2712

The CVE-2018-2712 entry concerns Oracle Financial Services Applications – Loan Loss Forecasting and Provisioning, UI subcomponent, affected in 8.0.x. The issue is described as an unauthenticated, network-accessible vulnerability in the User Interface that requires human interaction and can lead t...

CVE-2018-2724

CVE-2018-2724 affects Oracle Financial Services Applications (Loan Loss Forecasting and Provisioning), specifically the User Interface subcomponent in version 8.0.x. The vulnerability enables a low-privileged attacker who can access the system over HTTP to compromise the application, potentially ...

CVE-2018-2724

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2712: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2018-2724: Undefined Security Weakness

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network...

PT-2018-15763

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Loan Loss Forecasting and Provisioning version 8.0.x Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Financial Services Loan Loss Forecasting and Provisioning...

PT-2018-15751

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Loan Loss Forecasting and Provisioning version 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Loan Loss Forecasting and Provisioning...

[SECURITY] Fedora 26 Update: heketi-5.0.1-1.fc26

Heketi provides a RESTful management interface which can be used to manage the life cycle of GlusterFS volumes. With Heketi, cloud services like OpenStack Manila, Kubernetes, and OpenShift can dynamically provision GlusterFS volumes with any of the supported durability types. Heketi will...

Hewlett Packard Enterprise Moonshot Provisioning Manager Security Vulnerability

Moonshot Provisioning Manager helps IT administrators deploy and manage HP Moonshot systems. A remote code execution vulnerability exists in Hewlett Packard Enterprise Moonshot Provisioning Manager. An attacker could exploit the vulnerability to execute arbitrary code in the context of a user...

Hewlett Packard Enterprise Moonshot Provisioning Manager Remote Code Execution Vulnerability (CNVD-2018-03082)

Moonshot Provisioning Manager helps IT administrators deploy and manage HP Moonshot systems. A remote code execution vulnerability exists in Hewlett Packard Enterprise Moonshot Provisioning Manager. An attacker could exploit the vulnerability to execute arbitrary code in the context of a user...

Hewlett Packard Enterprise Moonshot Provisioning Manager Denial of Service Vulnerability

Moonshot Provisioning Manager helps IT administrators deploy and manage HP Moonshot systems. A denial of service vulnerability exists in Hewlett Packard Enterprise Moonshot Provisioning Manager. An attacker could exploit the vulnerability to cause a denial of service condition...

Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance server_response Directory Traversal Denial Of Service Vulnerability

This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of Hewlett Packard Enterprise Moonshot Provisioning Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the serverresponse.py file. The issue...

Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance khuploadfile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Moonshot Provisioning Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the khuploadfile.cgi file. The issue results...

Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance khuploadfile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Moonshot Provisioning Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the khuploadfile.cgi file. The issue results...

PT-2018-1081

Name of the Vulnerable Software and Affected Versions Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 Description A Remote Code Execution issue exists due to insufficient input validation in the khuploadfile.cgi script of the HPE Moonshot Provisioning Manager...

PT-2018-8473

Name of the Vulnerable Software and Affected Versions Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 Description A Remote Denial of Service issue was discovered, potentially allowing for a denial of service attack. The vulnerability is also described as a server...

PT-2018-1082

Name of the Vulnerable Software and Affected Versions Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 Description A Remote Code Execution issue exists due to insufficient input validation in the khuploadfile.cgi script of the HPE Moonshot Provisioning Manager...

HPESBHF03803 rev.2 - Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance, Remote Denial of Service and Execution of Code

Potential Security Impact: Remote: Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Moonshot Provisioning Manager prior to and including v1.20 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8975 |...