Unspecified Vulnerability in Oracle BI Publisher (CNVD-2021-04815)

Oracle BI Publisher is a reporting solution that makes it easier and faster than traditional reporting tools to produce, manage and deliver all reports and documents. An unspecified vulnerability exists in the BI Publisher Security component in Oracle BI Publisher 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3....

Oracle Fusion Middleware 安全漏洞

Oracle BI Publisher is a reporting solution that makes it easier and faster than traditional reporting tools to produce, manage and deliver all reports and documents. An unspecified vulnerability exists in the BI Publisher Security component in Oracle BI Publisher 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3....

Oracle Fusion Middleware 组件安全漏洞

Oracle Business Intelligence Enterprise Edition OBIEE is a business intelligence BI tool from Oracle Corporation. An information disclosure vulnerability exists in the BI Platform Security component in Oracle Business Intelligence Enterprise Edition 12.2.1.3.0, 12.2.1.4.0. An attacker could explo...

Oracle Unified Directory Denial of Service Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. A denial of service vulnerability exists in the Security component of Oracl...

Security Bulletin: A vulnerability in IBM Java Runtime affects TXSeries for Multiplatforms

Summary TXSeries for Multiplatforms has addressed the following vulnerability reported by IBM® Runtime Environment Java™ Vulnerability Details CVEID: CVE-2020-2590 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Security component could allow an unauthenticated attacke...

The vulnerability of the Security component of the PeopleSoft Enterprise HCM Global Payroll Core application allows a perpetrator to gain unauthorized access to protected information, to modify, add, or delete data, or to cause service interruptions.

The vulnerability of the Security component of the PeopleSoft Enterprise HCM Global Payroll Core application is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information, to modif...

Cross site scripting

An XSS issue was discovered in TreasuryXpress 19191105. Due to the lack of filtering and sanitization of user input, malicious JavaScript can be executed by the application's administrators. A malicious payload can be injected within the Multi Approval security component and inserted via the Note...

Apple macOS Catalina Security Component Logic Flaw Vulnerability

Apple macOS Catalina is a proprietary operating system developed by Apple Inc. for Mac computers.Security is one of the security components of the system. A security vulnerability exists in the Security component of Apple macOS Catalina prior to version 10.15.6. The vulnerability can be exploited...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2019 - Includes Oracle Oct 2019 CPU affects IBM Tivoli Composite Application Manager for Transactions-Robotic Response Time

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 ,version 8, that is used by IBM Tivoli Composite Application Manager for Transactions - Robotic Response Time. These issues were disclosed as part of the IBM Java SDK updates in October 2019. Vulnerability...

CVE-2020-14551

Vulnerability in the Oracle AutoVue product of Oracle Supply Chain component: Security. The supported version that is affected is 21.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle AutoVue. Successful attacks of this vulnerabili...

The vulnerability of the Security component of the Oracle Retail Store Inventory Management software allows a hacker to gain full control over the application.

The vulnerability of Oracle Retail Store Inventory Management’s Security component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the HTTP protocol...

The vulnerability of the Security component in Oracle Java SE and Oracle Java SE Embedded software platforms allows attackers to trigger a service failure.

The vulnerability of the Security component in Oracle Java SE and Oracle Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Security component of the Oracle Transportation Management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security component of the Oracle Transportation Management system relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

The vulnerability of the Security component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a hacker to induce a service failure.

The vulnerability of the Security component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the HTTP protocol...

The vulnerability of the Security component of the Oracle Hyperion Financial Management application, which allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Security component of the Oracle Hyperion Financial Management application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability affects the security component of the WSL subsystem of the distributed Git version control system. It allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the security component of the WSL subsystem of the distributed Git version control system is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential data, cause service...

OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

Unspecified Vulnerability in Oracle Hyperion Financial Management

Oracle Hyperion is a set of financial modeling applications from Oracle. A security vulnerability exists in the Security component of Hyperion Financial Management version 11.1.2.4 in Oracle Hyperion. An attacker could exploit the vulnerability to unauthorized creation, deletion, or modification ...

Design/Logic Flaw

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Security. Supported versions that are affected are 9.3.3, 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attac...

The vulnerability of the `generateCookieHash` function in the Symfony/security component of the Symfony software development and web application management platform allows attackers to bypass authentication procedures.

The vulnerability of the generateCookieHash function in the Symfony software platform for web application development and management is related to an error during authentication. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process...