Unspecified Vulnerability in Oracle E-Business Suite User Management

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.User Management is one of the use...

User Management 1.1 Cross Site Scripting

Exploit Title: User Management 1.1 - Cross-site Scripting Date: 2018-10-16 Exploit Author: Ismail Tasdelen Vendor Homepage: http://ardawan.com/ Software Link : http://um.ardawan.com Software : User Management Version : 1.1 Vulernability Type : Cross-site Scripting Vulenrability : Stored XSS CVE :...

CVE-2018-3236

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Reports. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2018-3236

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Reports. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Reports. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2018-3236

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Reports. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2018-3236

CVE-2018-3236 affects Oracle E-Business Suite User Management (Reports) and is confirmed in connected sources as Vulnerability in Oracle User Management component. Affected are E-Business Suite versions 12.1.3, 12.2.3–12.2.7. The flaw permits a high-privilege attacker who can reach the applicatio...

CVE-2018-3236

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Reports. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

Time and Expense Management System 3.0 - Cross-Site Request Forgery (Add Admin)

Time and Expense Management System 3.0 - Cross-Site Request Forgery Add Admin Exploit Title: Time and Expense Management System 3.0 - Cross-Site Request Forgery Add Admin Dork: N/A Date: 2018-10-17 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.initechs.com/ Software Link:...

CVE-2018-0462

A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to perform a denial of service DoS attack against an affected system. The vulnerability is due to insufficient validation of user-provided input...

Input validation

A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to perform a denial of service DoS attack against an affected system. The vulnerability is due to insufficient validation of user-provided input...

CVE-2018-0462 Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability

A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to perform a denial of service DoS attack against an affected system. The vulnerability is due to insufficient validation of user-provided input...

CVE-2018-0462 Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability

A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to perform a denial of service DoS attack against an affected system. The vulnerability is due to insufficient validation of user-provided input...

CVE-2018-0462

CVE-2018-0462 concerns Cisco Enterprise NFV Infrastructure Software (NFVIS). The vulnerability arises in the user management functionality due to insufficient validation of user-provided input. An authenticated, highly privileged user can perform a sequence of user-management operations that inte...

Symfony Configuration Cheat Sheet

The Symfony framework provides web developers with a great foundation for their PHP applications. Several components can be used for many recurring tasks that are required in every application, such as handling input forms or accessing a database. In addition to functional tasks, security-relevan...

Command execution vulnerability at root level in Xiaomi Router 3A user management page

Xiaomi Router 3A is a router. A command execution vulnerability exists at the root level of the Xiaomi Router 3A user management page. An attacker can exploit the vulnerability to remotely execute arbitrary code...

Command execution vulnerability at root level in Xiaomi Router 4 user management page

The Xiaomi Router 4 is a router. A command execution vulnerability exists at the root level of the Xiaomi Router 4 user management page. An attacker can exploit the vulnerability to remotely execute arbitrary code...

Cisco Enterprise NFV Infrastructure Software Input Validation Vulnerability

Cisco Enterprise NFV Infrastructure Software NFVIS is a suite of NVF infrastructure software platforms from Cisco. The platform can be achieved through the central coordinator and controller of the virtualization services of the full lifecycle management. An input validation vulnerability exists ...

Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability

A vulnerability in the user management functionality of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to perform a denial of service DoS attack against an affected system. The vulnerability is due to insufficient validation of user-provided input...

CVE-2018-1000634

The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrictions logging in as a more powerful administrator. This attack appear to be exploitable via Use use...