CVE-2013-0505

IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors...

Design/Logic Flaw

IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors...

CVE-2013-0505

IBM Sterling Order Management is affected by CVE-2013-0505 through multiple older release lines: 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13. The vulnerability is an XPath injection allowing remote authenticated users to read arbitrary XML files vi...

CVE-2013-0505

IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors...

PT-2013-2391

Name of the Vulnerable Software and Affected Versions IBM Sterling Order Management versions 8.0 through 8.0 before HF127 IBM Sterling Order Management versions 8.5 through 8.5 before HF89 IBM Sterling Order Management versions 9.0 through 9.0 before HF69 IBM Sterling Order Management versions...

CVE-2013-0505: Improper Input Validation

IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors...

CVE-2012-4837

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors...

CVE-2012-4840

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to conduct XPath injection attacks, and call XPath extension functions, via unspecified vectors...

Design/Logic Flaw

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors...

CVE-2012-4840

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to conduct XPath injection attacks, and call XPath extension functions, via unspecified vectors...

CVE-2012-4837

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors...

CVE-2012-4837

IBM Cognos BI is vulnerable to XPath injection (read arbitrary XML) for versions 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1. The issue arises from improper input validation prior to XPath query use and requires remote authenticated access. Remediation: apply Cognos ...

PT-2013-1726

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1 through 8.4.1 before IF1 IBM Cognos Business Intelligence BI versions 10.1 through 10.1 before IF2 IBM Cognos Business Intelligence BI versions 10.1.1 through 10.1.1 before IF2 IBM Cognos...

CVE-2012-4840: Improper Control of Generation of Code

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote attackers to conduct XPath injection attacks, and call XPath extension functions, via unspecified vectors...

PT-2013-1727

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI versions 8.4.1 through 8.4.1 before IF1 IBM Cognos Business Intelligence BI versions 10.1 through 10.1 before IF2 IBM Cognos Business Intelligence BI versions 10.1.1 through 10.1.1 before IF2 IBM Cognos...

CVE-2012-4837: Exposure of Sensitive Information to an Unauthorized Actor

IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors...

DataWatch Monarch Business Intelligence (BI) v5.1 Admin Section Blind XPath Injection

DataWatch Monarch BI v5.1 admin section blind XPath injection Class: Input Validation Error Remote: Yes Local: No Published: 26/06/2012 Credit: Raymond Rizk of Dionach Limited [email protected] Vulnerable: DataWatch Monarch BI v5.1 DataWatch's Monarch BI admin section is prone to a blind XPath...

DataWatch Monarch Business Intelligence (BI) 5.1 Blind XPath Injection

DataWatch Monarch BI v5.1 admin section blind XPath injection Class: Input Validation Error Remote: Yes Local: No Published: 26/06/2012 Credit: Raymond Rizk of Dionach Limited [email protected] Vulnerable: DataWatch Monarch BI v5.1 DataWatch's Monarch BI admin section is prone to a blind XPath...

CGI Generic XPath Injection (2nd pass)

By providing specially crafted parameters to CGIs, Nessus was able to get an error from the underlying XPath engine. This error suggests that the CGI is affected by an XPath injection vulnerability. An attacker may exploit this flaw to bypass authentication or read confidential data. %NASLMINLEVE...

SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities

Document Title: =============== SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities Release Date: ============= 2011-07-26 Vulnerability Laboratory ID VL-ID: ==================================== 119 Product & Service Introduction: =============================== Die weltweit groesste SaaS...