Security Bulletin: A vulnerability in OpenSSL affects IBM DataPower Gateways (CVE-2016-2183)

Summary A vulnerability in the SSL/TLS protocol affects the ISAM Access Manager client and JMS. IBM DataPower Gateways has fully addressed the applicable CVE in version 7.5.2, and in earlier releases it was addressed with a combination of a code fix and a workaround. Vulnerability Details CVEID:...

Opera Girl by Vivienne Tam - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Opera Girl by Vivienne Tam published at the 'play' market has multiple vulnerabilities...

CVE-2012-5210

HP iMC TACACS+ Authentication Manager (TAM) tamServletDownload vulnerability (CVE-2012-5210) is a directory-traversal flaw disclosed by ZDI-CAN-1646, enabling remote attackers to read files readable by SYSTEM and potentially disclose credentials. The issue affects TAM add-in module prior to 5.2 E...

CVE-2010-4120

Multiple cross-site scripting XSS vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via 1 the parm1 parameter to ivt/ivtserver, or the method parameter to 2 acl, 3 domain, ...

CVE-2010-4120

Multiple cross-site scripting XSS vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via 1 the parm1 parameter to ivt/ivtserver, or the method parameter to 2 acl, 3 domain, ...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise HCM TAM component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 9.0 Bundle 10 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-3409

CVE-2009-3409 affects Oracle PeopleSoft Enterprise HCM (TAM), version 9.0 Bundle 10. The vulnerability (HTTP, Valid Session) can be exploited by remote authenticated users to impact confidentiality and integrity with Partial+ impact; CVSS base score 3.6 (LOW). Mitigation is to apply the Oracle Cr...

CVE-2006-0513

Concrete details: CVE-2006-0513 affects IBM Tivoli Access Manager Web Server Plug-in (pkmslogout) on TAM 5.1.0.x. The vulnerability is a directory traversal in the filename parameter (e.g., filename=../../../../etc/passwd) that lets an attacker read arbitrary files, requiring authentication to tr...