Jean-Michel Huguet

Tanium Client is subject to a denial of service condition. The vulnerability allows for a denial of service.

Tanium Threat Response contains an information disclosure issue. The vulnerability allows for the potential exposure of information.

An improper input validation issue exists in Tanium Appliance.

Tanium Threat Response contains an information disclosure issue. The vulnerability allows for the potential exposure of information.

Tanium Threat Response contains an information disclosure issue.

A vulnerability exists in the Oracle Business Intelligence Enterprise Edition component, Platform Security, that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction from a person other than the attacker and may impact additional products. Successful exploitation can result in unauthorized data modification and read access.

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This issue is due to improper validation of user-supplied command arguments. An attacker could exploit this by executing crafted commands on the CLI of an affected device, allowing them to execute arbitrary commands on the underlying operating system as the root user. The attacker must have valid administrative credentials to exploit this vulnerability.

The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher, resulting in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data.

The issue affects the Oracle BI Publisher product of Oracle Analytics, specifically the XML Services component. It allows a low-privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks can result in unauthorized update, insert, or delete access to some Oracle BI Publisher accessible data and unauthorized ability to cause a partial denial of service of Oracle BI Publisher.

The issue is an authorization bypass vulnerability that could enable an authenticated user to access unauthorized data stored within the Now Platform. It is estimated that over 481,000 instances may be affected.

A vulnerability in the CLI could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. The attacker must have valid administrative credentials to exploit this issue. This is due to insufficient validation of arguments passed to specific CLI commands, allowing an attacker to execute arbitrary commands with the privileges of root by including crafted input as the argument of an affected CLI command.

A stored XSS attack can be performed by an authenticated, remote attacker on the web UI of the system. The issue arises from improper input validation in the web UI, allowing an attacker with valid administrative credentials to inject malicious code into specific pages. This could lead to the execution of arbitrary script code in the context of the web UI or access to sensitive, browser-based information.

A vulnerability in the implementation of internal system processes could allow an authenticated, local attacker to access sensitive information on an affected device. The attacker must have valid administrative credentials to exploit this issue. This vulnerability is due to insufficient masking of sensitive information displayed through system CLI commands. An attacker could exploit this by using reconnaissance techniques at the device CLI, potentially accessing sensitive information that could be used for additional attacks.

A vulnerability in the system file permission handling could allow an authenticated, local attacker to overwrite critical system files, causing a DoS condition. The attacker must have valid administrative credentials to exploit this issue. This vulnerability is due to a race condition with handling system files, which an attacker could exploit by performing specific operations on the file system, potentially leading to the device being in an inconsistent state.

The issue is related to a XSS vulnerability in the maps section of the user interface. This vulnerability requires authentication and user interaction to be exploited. It may allow a remote attacker to conduct cross-site scripting attacks.

A vulnerability was identified in the user interface of the SolarWinds Platform, related to a SWQL injection issue. This vulnerability requires authentication and user interaction to be exploited, allowing a remote attacker to execute arbitrary code. The issue is associated with a lack of protection for the SQL query structure.

The issue is related to an Elevation of Privilege vulnerability.

The issue is related to errors in processing input data in the Utility component of Oracle Solaris. Exploitation of this issue can allow an attacker to execute arbitrary code. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products. The issue can result in the takeover of Oracle Solaris.