The vulnerability of the Claim Line LOV component of the Oracle Trade Management software for managing trading operations in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Claim Line LOV component of the Oracle Trade Management software for managing trading operations within the Oracle E-Business Suite is related to insufficient validation of input data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized...

SEMCMS 安全漏洞

SEMCMS is a content management system CMS for foreign trade websites that supports multiple languages. A security vulnerability exists in SEMCMS version v.4.8, which originated from a vulnerability that allows remote attackers to execute arbitrary code via a crafted script...

Vulnerabilities fixed in Oracle E-Business Suite

Oracle has fixed vulnerabilities in E-Business suite and components. A malicious party could exploit the vulnerabilities to perform Perform cross-site scripting XSS attacks. Such attacks can lead to execution of arbitrary code in the victim's victim's browser, or access sensitive data in the...

CVE-2024-32536

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Trade Pips WP TradingView allows Stored XSS.This issue affects WP TradingView: from n/a through 1.7...

CVE-2024-32536

CVE-2024-32536 corresponds to a stored XSS in WordPress WP TradingView plugin. The vulnerability is described as improper neutralization of input during web page generation and affects WP TradingView from an unknown prior version up to 1.7. The connected sources indicate this CVE has not been pub...

CVE-2024-32536 WordPress WP TradingView plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Trade Pips WP TradingView allows Stored XSS.This issue affects WP TradingView: from n/a through 1.7...

CVE-2024-21075

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim Line LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2024-21073

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2024-21076

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Offer LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2024-21073

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2024-21075

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim Line LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2024-21077

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: GL Accounts LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2024-21074

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Finance LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2024-21076

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Offer LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2024-21077

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: GL Accounts LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2024-21074

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Finance LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management...

CVE-2024-21076

Oracle E-Business Suite — Oracle Trade Management (Offer LOV) is affected in 12.2.3–12.2.13 due to insufficient input validation. An unauthenticated, network-access attacker can exploit via HTTP to gain unauthorized access to Oracle Trade Management data. The issue is described in external adviso...

CVE-2024-21077

The connected documents confirm a vulnerability in Oracle E-Business Suite’s Oracle Trade Management, specifically the GL Accounts LOV component, affecting 12.2.3–12.2.13. An unauthenticated attacker with network access via HTTP can compromise Oracle Trade Management, potentially gaining unauthor...

CVE-2024-21075

CVE-2024-21075 affects Oracle E-Business Suite Oracle Trade Management, Claim Line LOV, versions 12.2.3–12.2.13. The issue allows unauthenticated, network-accessible (HTTP) compromise of Oracle Trade Management with potential unauthorized data access. CVSS v3.1 base score 7.5 (Confidentiality imp...

CVE-2024-21073

CVE-2024-21073 affects Oracle E-Business Suite Oracle Trade Management, component Claim LOV. The issue arises from insufficient input validation in Claim LOV, allowing unauthenticated remote attacker over HTTP to access or compromise Oracle Trade Management, with impact on data confidentiality (p...