7803 matches found
CVE-2017-10032
CVE-2017-10032 affects Oracle Transportation Management (OTM) within Oracle Supply Chain Products Suite, specifically the Access Control List subcomponent. Affected versions include 6.3.4.1, 6.3.5.1, 6.3.6.1, 6.3.7.1, 6.4.0, 6.4.1, and 6.4.2. The vulnerability can be exploited by a low-privileged...
CVE-2017-10032
Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite subcomponent: Access Control List. Supported versions that are affected are 6.3.4.1, 6.3.5.1, 6.3.6.1, 6.3.7.1, 6.4.0, 6.4.1 and 6.4.2. Easily exploitable vulnerability allows low privileged...
Oracle Agile PLM Remote Vulnerability (CNVD-2017-26391)
Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle, which provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Agile PLM Product Lifecycle Management is one of the lifecycle management components. Oracle Agile PLM Product...
Oracle Agile PLM Remote Vulnerability (CNVD-2017-26392)
Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle, which provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Agile PLM Product Lifecycle Management is one of the lifecycle management components. Oracle Agile PLM Product...
Oracle Agile PLM Local Vulnerability
Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Agile PLM is one of the project management components. A security vulnerability exists in the Security subcomponent of...
Pharmaceutical Giant Still Feeling NotPetya's Sting
NotPetya was massive shift in malware tactics as what was initially believed to be another global ransomware attack on par with WannaCry was instead a wiper in disguise. It claimed thousands of victims worldwide, including some of the highest profile manufacturers, critical infrastructure provide...
Oracle Agile PLM Remote Vulnerability (CNVD-2017-26814)
Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Agile PLM is one of the project management components. A security vulnerability exists in the Security subcomponent of...
Oracle Agile PLM Remote Vulnerability (CNVD-2017-26813)
Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Agile PLM is one of the project management components. A security vulnerability exists in the Security subcomponent of...
Unspecified Vulnerability in Oracle PeopleSoft Enterprise FSCM (CNVD-2017-20277)
Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise FSCM is one of the financial and supply chain management components. A...
IBM Emptoris Strategic Supply Management Platform Denial of Service Vulnerability
IBM Emptoris Strategic Supply Management is a common Web-based portal access to the Emptoris suite of products management platform from IBM. A security vulnerability exists in the authentication feature in IBM Emptoris Strategic Supply Management versions 10.0.0.x through 10.1.1.x. The...
IBM Emptoris Strategic Supply Management Platform Cross-Site Scripting Vulnerability (CNVD-2017-23341)
IBM Emptoris Strategic Supply Management is a common Web-based portal access to the Emptoris suite of products management platform from IBM. A cross-site scripting vulnerability exists in IBM Emptoris Strategic Supply Management versions 10.0.0.x through 10.1.1.x. A remote attacker could use this...
IBM Emptoris Strategic Supply Management Platform Cross-Site Scripting Vulnerability
IBM Emptoris Strategic Supply Management is a common Web-based portal access to the Emptoris suite of products management platform from IBM. A cross-site scripting vulnerability exists in IBM Emptoris Strategic Supply Management versions 10.0.0.x through 10.1.1.x. A remote attacker could use this...
CVE-2016-6019
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trust...
Authentication flaw
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to a denial of service attack. An attacker can exploit a vulnerability in the authentication features that could log out users and flood user accounts with emails. IBM X-Force ID: 118838...
CVE-2016-6019
CVE-2016-6019 affects IBM Emptoris Strategic Supply Management Platform 10.0.0.x–10.1.1.x. Multiple connected sources (CNVD-2017-23341, NVD entry) confirm a cross-site scripting vulnerability in the web UI that lets an attacker inject arbitrary JavaScript, potentially leading to credentials discl...
CVE-2016-8951
The CVE-2016-8951 entry describes a denial-of-service vulnerability in IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x caused by a flaw in the authentication features that can log out users and flood their accounts with emails. Connected sources corroborate the affecte...
CVE-2016-8952
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trust...
The MeDoc Connection
This Post Authored by David Maynor, Aleksandar Nikolic, Matt Olney, and Yves YounanSummaryThe Nyetya attack was a destructive ransomware variant that affected many organizations inside of Ukraine and multinational corporations with operations in Ukraine. In cooperation with Cisco Advanced Service...
Save Time by Streamlining Vendor Risk Assessments in the Cloud
As your organization enthusiastically adopts cloud and mobile services from multiple new vendors, are your already-busy security and compliance teams scrambling to assess the risks of using these new providers’ products? Are you still using a manual process for conducting these vendor evaluations...
