CVE-2018-2610

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and security. The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion...

Design/Logic Flaw

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and security. The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion...

CVE-2018-2610

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and security. The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion...

CVE-2018-2610

Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion subcomponent: Access and security. The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion...

CVE-2018-2610

CVE-2018-2610 affects Oracle Hyperion Data Relationship Management, subcomponent Access and security , specifically the affected product/version: Hyperion Data Relationship Management 11.1.2.4.330. The vulnerability description states an unauthenticated attacker with network access over HTTP can ...

Disabling automatic password change for nonpersistent desktops

Computers use their machine account password for authentication with Active Directory. By default, computers are configured to change their machine account passwords every 30 days. This setting affects nonpersistent desktops in the following ways: 1. When you deploy the nonpersistent desktop, the...

CVE-2017-17898

Dolibarr ERP/CRM version 6.0.4 does not block direct requests to .tpl.php files, which allows remote attackers to obtain sensitive information...

Netwide Assembler 'is_mmacro()' Function Illegal Address Access Vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A security vulnerability exists in the 'ismmacro' function in the asm/preproc.c file in NASM version 2.14rc0, which stems from a lack of relationship detection. A remote attacker could exploit this...

Unspecified Spoofing Vulnerability in SAP Customer Relationship Management (CRM) IC WebClient

SAP Customer Relationship Management is a customer relationship management solution. An unspecified spoofing vulnerability exists in SAP Customer Relationship Management CRM IC WebClient, which can be exploited by attackers to conduct spoofing attacks and perform unauthorized operations...

Zurmo Cross-Site Scripting Vulnerability

Zurmo is the United States Zurmo company's set of open source PHP-based customer relationship management system CRM. A cross-site scripting vulnerability exists in Zurmo version 3.2.1.57987acc3018. A remote attacker can exploit this vulnerability by sending a 'redirectUrl' parameter with a data:...

SAP Customer Relationship Management Email Form Editor Cross-Site Scripting Vulnerability

SAP Customer Relationship Management is a customer relationship management solution. A cross-site scripting vulnerability exists in the SAP Customer Relationship Management email form editor because it does not properly filter user-supplied input. A remote attacker could exploit this vulnerabilit...

SAP Customer Relationship Management Java administration console cross-site scripting vulnerability

SAP Customer Relationship Management CRM is a set of customer relationship management solutions from SAP. The program includes sales management , marketing management , customer service systems and other modules . Java administration console is one of the Java administration console . A cross-sit...

SAP Customer Relationship Management Java Component Cross-Site Request Forgery Vulnerability

SAP Customer Relationship Management CRM is a set of customer relationship management solutions from SAP. The program includes modules for sales management, marketing management, customer service system , etc. Java component is one of the Java components. A cross-site request forgery vulnerabilit...

CVE-2017-14231

GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service account blockage by leveraging the mishandling of certain username substring relationships, such as the admin username versus the admin username, related to register.php, User.class.php, and Type.class.php...

Error: The trust relationship between this workstation and the primary domain failed

Users cannot log on to a system using Active Directory credentials and the following error message appears: "The trust relationship between this workstation and the primary domain failed.” This issue is seen when the session logon is attempted through Remote Desktop Protocol, ICA, or directly at...

SAP Customer Relationship Management (CRM) IPC Pricing Cross-Site Scripting Vulnerability

SAP Customer Relationship Management is a customer relationship management solution. A cross-site scripting vulnerability exists in SAP Customer Relationship Management CRM IPC Pricing. A remote attacker could exploit the vulnerability to execute arbitrary script code in an unsuspecting user's...

SAP Customer Relationship Management (CRM) WebClient UI Cross-Site Scripting Vulnerability

SAP Customer Relationship Management is a customer relationship management solution. A cross-site scripting vulnerability exists in the SAP Customer Relationship Management CRM WebClient UI. A remote attacker could exploit the vulnerability to execute arbitrary script code in an unsuspecting user...

Open Distributed Threat Intelligence: Yeti

Yeti is a platform meant to organize observables, indicators of compromise, TTPs, and knowledge on threats in a single, unified repository. Yeti will also automatically enrich observables e.g. resolve domains, geolocate IPs so that you don’t have to. Yeti provides an interface for humans shiny...

SugarCRM Incomplete Blacklist Vulnerability

SugarCRM is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing, management and distribution of sales leads for different customer needs, and enables information sharing and tracking of sales representatives. An incomplete...

Oracle CRM Technical Foundation Remote Vulnerability (CNVD-2017-26284)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Oracle CRM Technical Foundation ...