Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-14862 3 Knockoutjs, Oracle, Redhat 7 Knockout, Business Intelligence, Goldengate and 4 more 2024-11-21 6.1 Medium
There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.
CVE-2019-14839 1 Redhat 3 Business-central, Descision Manager, Process Automation 2024-11-21 7.5 High
It was observed that while login into Business-central console, HTTP request discloses sensitive information like username and password when intercepted using some tool like burp suite etc.