Yeager CMS 1.2.1 - Multiple Vulnerabilities

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Yeager CMS vulnerable version: 1.2.1 fixed version: 1.3 CVE number: CVE-2015-7567, CVE-2015-7568, CVE-2015-7569, CVE-2015-7570 ,...

HARMAN AMX Deliberate Backdoor SEC Consult

AMX, a provider of audio-visual conferencing gear used in sensitive government and military locations, has removed a “deliberate” backdoor in one of its central controller system products. New firmware for the AMX NX-1200 was made available Thursday, removing an administrative account that was...

CVE-2016-0424

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0422...

CVE-2016-0422

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0424...

CVE-2016-0422

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0424...

Code injection

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0424...

Code injection

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Monitoring and Diagnostics SEC...

Code injection

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Enterprise Infrastructure SEC...

Code injection

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0422...

Code injection

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Monitoring and Diagnostics SEC...

CVE-2016-0424

Technical details for CVE-2016-0424 are not provided in the connected documents. Public descriptions mention an unspecified vulnerability affecting JD Edwards EnterpriseOne Tools 9.1/9.2, with DoS-like impact; monitor for updates and official advisories.

CVE-2016-0421

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Monitoring and Diagnostics SEC...

CVE-2016-0423: Undefined Security Weakness

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Enterprise Infrastructure SEC...

PT-2016-4197

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards Products versions 9.1 through 9.2 Description The issue affects the availability of the system. It is related to the Enterprise Infrastructure SEC in the JD Edwards EnterpriseOne Tools component. Recommendations For versions...

CVE-2016-0421: Undefined Security Weakness

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Monitoring and Diagnostics SEC...

PT-2016-4199

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards Products versions 9.1 through 9.2 Description The issue affects the availability of the system, related to Enterprise Infrastructure SEC. Recommendations For Oracle JD Edwards Products versions 9.1 through 9.2, at the moment,...

PT-2016-4198

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards Products versions 9.1 through 9.2 Description The issue affects confidentiality, integrity, and availability. It is related to the Enterprise Infrastructure SEC in the JD Edwards EnterpriseOne Tools component. Recommendations...

CVE-2016-0424: Undefined Security Weakness

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0422...

CVE-2016-0422: Undefined Security Weakness

Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via vectors related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2016-0424...

PT-2016-4196

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards Products versions 9.1 through 9.2 Description The issue affects the availability of the system, related to Monitoring and Diagnostics SEC in the JD Edwards EnterpriseOne Tools component. Recommendations For Oracle JD Edwards...