58 matches found
Oracle E-Business Multiple Vulnerabilities (January 2017 CPU)
The version of Oracle E-Business installed on the remote host is missing the January 2017 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple unspecified vulnerabilities in multiple components and subcomponents, the most severe of which can allow an unauthenticated, remote...
Cisco ACE XML Gateway <= 6.0 Internal IP disclosure
No description provided by source...
CVE-2009-3457
Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...
Information disclosure
Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...
CVE-2009-3457
Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) prior to version 6.1 are affected by an information-disclosure vulnerability. An HTTP request that lacks a handler (e.g., an OPTIONS request or a crafted GET request) can trigger a Message-handling Errors message that exposes a cl...
CVE-2009-3457
Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...
CVE-2009-3457: Exposure of Sensitive Information to an Unauthorized Actor
Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...
Cisco应用控制引擎(ACE) XML网关IP地址信息泄漏漏洞
Bugraq ID: 36522 Cisco ACE XML网关是Cisco应用控制引擎ACE家族产品的重要组件。 Cisco ACE XML网关缺少正确的错误处理管理，远程攻击者可以利用漏洞获得内部IP信息。 Cisco ACE XML网关在不能正确找到请求相匹配的处理器时，会直接对客户端提供包含内部IP地址的错误消息应答。 相关的请求不仅仅限于OPTIONS请求类型，如果GET请求使用的路径没有相应的处理器配置，也同样泄漏内部IP地址信息。 Cisco Application Control Engine ACE XML Gateway 6.0 Cisco Application...
Cisco ACE XML Gateway <= 6.0 Internal IP disclosure
+------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. | |...
Cisco ACE XML Gateway information leakage
Internal address of server is leaked on some HTTP requests...
Cisco ACE XML Gateway 6.0 - Internal IP Disclosure
Cisco ACE XML Gateway 6.0 - Internal IP Disclosure +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...
Cisco ACE XML Gateway <= 6.0 Internal IP disclosure
No description provided by source. +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...
Cisco ACE XML Gateway <= 6.0 Internal IP disclosure
Exploit for unknown platform in category remote exploits =================================================== Cisco ACE XML Gateway = 6.0 Internal IP disclosure =================================================== Title: Cisco ACE XML Gateway = 6.0 Internal IP disclosure CVE-ID: OSVDB-ID: Author:...
Cisco ACE XML Gateway 6.0 - Internal IP Disclosure
+----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. | |...
CVE-2006-3717
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unknown impact and attack vectors, aka Oracle Vuln 1 APPS03 and 2 APPS04 for Oracle Application Object Library; and 3 APPS20 for Oracle XML Gateway...
CVE-2006-3717
Technical details about CVE-2006-3717 are not publicly available in the provided documents. Monitor for updates.
CVE-2006-3717
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unknown impact and attack vectors, aka Oracle Vuln 1 APPS03 and 2 APPS04 for Oracle Application Object Library; and 3 APPS20 for Oracle XML Gateway...
CVE-2006-3717: Undefined Security Weakness
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unknown impact and attack vectors, aka Oracle Vuln 1 APPS03 and 2 APPS04 for Oracle Application Object Library; and 3 APPS20 for Oracle XML Gateway...