Archive
12 May 2020
Vulnerabilities first published on this day (UTC), newest first.
16 results · Clear filters · Feed
-
Medium 6.0
Reflexive XSS in GLPI
In GLPI after 0.68.1 and before 9.4.6, multiple reflexive XSS occur in Dropdown endpoints due to an invalid Content-Type. This has been fixed in version 9.4.6.
-
Medium 4.3
SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowi…
-
Medium 6.1
SAP Enterprise Threat Detection, versions 1.0, 2.0, does not sufficiently encode error response pages in case of errors…
-
Medium 6.5
Under certain conditions SAP Adaptive Server Enterprise, versions 15.7, 16.0, allows an attacker to access information …
-
Medium 5.4
SAP Business Objects Business Intelligence Platform (CMC and BI Launchpad) 4.2 does not sufficiently encode user-contro…
-
Medium 6.8
SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoin…
-
Medium 5.4
SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change…
-
Medium 5.4
Under certain conditions or error scenarios SAP Business Objects Business Intelligence Platform, version 4.2, allows an…
-
Medium 5.9
SAP Business Objects Business Intelligence Platform, version 4.2, allows an unauthenticated attacker to prevent legitim…
-
Medium 6.5
SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to …
-
Medium 5.3
SAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700, 710, 730, 731, 804) all…
-
Medium 5.0
Exposure of Sensitive Information to an Unauthorized Actor in ansible
A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when the ldap_attr and ldap_entry comm…
-
Medium 6.3
A flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the encryption of data at re…
-
Medium 5.3
IBM API Connect's V2018.4.1.0 through 2018.4.1.10 management server has an unsecured api which can be exploited by an u…
-
Medium 5.4
IBM API Connect V2018.4.1.0 through 2018.4.1.10 could allow a remote attacker to hijack the clicking action of the vict…
-
Medium 6.5
IBM Maximo Asset Management 7.6.0, and 7.6.1 could allow an authenticated user to obtain highly sensitive information t…