CVE-2020-7117

The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system...

KLA11794 Multiple vulnerability in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. Policy enforcement vulnerability in...

IBM Planning Analytics Cross-Site Scripting Vulnerability (CNVD-2020-32654)

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A cross-site scripting vulnerability exists in IBM Planning Analytics. An attacker can exploit thi...

IBM Planning Analytics Cross-Site Scripting Vulnerability (CNVD-2020-32657)

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A cross-site scripting vulnerability exists in IBM Planning Analytics. An attacker can exploit thi...

IBM Planning Analytics Cross-Site Scripting Vulnerability (CNVD-2020-32656)

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A cross-site scripting vulnerability exists in IBM Planning Analytics. An attacker can exploit thi...

CVE-2020-4431

IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 180761...

CVE-2020-4366

IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178965...

CVE-2020-4306

IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

The vulnerability of Power BI report servers, related to errors in information presentation on the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of the Power BI report server is related to errors in the way information is presented by the user interface. Exploiting this vulnerability could allow a malicious actor to carry out spear-phishing attacks remotely...

Veeam Backup & Replication 10 Cumulative Patch 2

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Requirements Please confirm that you are running the GA build of version 10 build 10.0.0.4461 or 10.0.0.4461 P1 prior to installing this update. You can check this und...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Loan Loss Forecasting and Provisioning component in the banking analytical system’s simulation model of Oracle Financial Services Applications allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Loan Loss Forecasting and Provisioning component in the banking analytical system’s simulation model involves a lack of protection for operational data. Exploiting this vulnerability allows an attacker to creat...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Profitability Management banking analytics system’s simulation model allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Profitability Management banking analytics system’s simulation model application relates to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to create, delete,...

The vulnerability of the User Interface component of the Oracle Advanced Outbound Telephony application, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the User Interface component of the Oracle Advanced Outbound Telephony application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

The vulnerability of the User Interface component of the Oracle Advanced Outbound Telephony application, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the User Interface component of the Oracle Advanced Outbound Telephony application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Hedge Management and IFRS Valuations banking analytical system’s simulation model applications allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Hedge Management and IFRS Valuations banking analytical system’s simulation model applications is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor t...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Balance Sheet Planning component in the bank analytics system’s simulation model allows a perpetrator to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Balance Sheet Planning banking analytics system’s simulation model relates to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to create, delete, or modify access...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Asset Liability Management banking analytics system’s simulation model applications allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Asset Liability Management banking analytics system’s simulation model application relates to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to create, delet...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Funds Transfer Pricing banking analysis system’s simulation model allows a perpetrator to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Funds Transfer Pricing banking analysis system’s simulation model relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to create,...

The vulnerability of the User Interface sub-component of the Oracle Financial Services Liquidity Risk Measurement and Management banking analytics system’s simulation model applications allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Liquidity Risk Measurement and Management banking analytics system’s simulation model applications is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacke...

The vulnerability of the User Interface sub-component of the Oracle Insurance Accounting Analyzer component in the bank analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface component of the Oracle Insurance Accounting Analyzer component in the bank analytics system’s simulation model application relates to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to create, delete, or modify...