CVE-2017-16687: Exposure of Sensitive Information to an Unauthorized Actor

The user self-service tools of SAP HANA extended application services, classic user self-service, a part of SAP HANA Database versions 1.00 and 2.00, can be misused to enumerate valid and invalid user accounts. An unauthenticated user could use the error messages to determine if a given username ...

PT-2017-14524

Name of the Vulnerable Software and Affected Versions SAP HANA Database versions 1.00 and 2.00 Description The user self-service tools of SAP HANA extended application services, classic user self-service, can be misused to enumerate valid and invalid user accounts. An unauthenticated user could u...

Universal Password Login Vulnerability in NatShell Blue Ocean Premier User Self-Service System

Blue Ocean Premier Broadband Access Gateway is a specialized intelligent device for Ethernet broadband access. A universal password login vulnerability exists in the NatShell Blue Ocean Excellence User Self-Service System, which can be exploited by an attacker to login to the system and view...

Oracle Identity Manager (October 2014 CPU

The remote host is missing the October 2014 Critical Patch Update for Oracle Identity Manager. It is, therefore, affected by multiple vulnerabilities : - The application is affected by a vulnerability in Apache Commons BeanUtils in which ClassLoader objects can be set via the class attribute of a...

CVE-2014-6487

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service...

CVE-2014-6487

CVE-2014-6487 is an unspecified vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware versions 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2. The flaw is described as allowing remote authenticated users to affect integrity via unknown vectors related to End User Self Ser...

CVE-2014-6487

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service...

CVE-2014-6487: Undefined Security Weakness

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service...

PT-2014-7249

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.5 through 11.1.2.2 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to End User Self Service in the Oracle Identit...

Oracle Identity Manager End User Self Service (January 2014 CPU)

The remote host is missing the January 2014 Critical Patch Update for Oracle Identity Manager. It is, therefore, potentially affected by multiple, unspecified vulnerabilities in the End User Self Service sub-component of Oracle Identity Manager. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2014-0391

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1 allows remote attackers to affect confidentiality via unknown vectors related to End User Self Service...

CVE-2013-5900

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1 allows remote attackers to affect integrity via unknown vectors related to End User Self Service...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1 allows remote attackers to affect integrity via unknown vectors related to End User Self Service...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1 allows remote attackers to affect confidentiality via unknown vectors related to End User Self Service...

CVE-2014-0391

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1 allows remote attackers to affect confidentiality via unknown vectors related to End User Self Service...

CVE-2013-5900

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1 allows remote attackers to affect integrity via unknown vectors related to End User Self Service...

PT-2014-2990

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.5 through 11.1.2.1 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to End User Self Service in the Oracle Identity Manager...

CVE-2014-0391: Undefined Security Weakness

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1 allows remote attackers to affect confidentiality via unknown vectors related to End User Self Service...

PT-2014-3609

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.5 through 11.1.2.1 Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors related to End User Self Service. Recommendations For versions 11.1.1.5...