Cyber security

Advisories

Sense of Security publishes security advisories on vulnerabilities identified through our security research.

We do this in accordance with our vulnerability disclosure policy and it is our way of giving something back to the security community.

We have identified vulnerabilities in products from major vendors such as IBM, Cisco, Microsoft, Oracle, Sun, Apache, and Adobe.

Security Advisory – SOS-19-001 – XML External Entities Injection (XXE) in XNAT 1.7

The Inteset Secure Lockdown de...
Security Advisory – SOS-18-003 – Inteset Secure Lockdown

The Inteset Secure Lockdown de...
Security Advisory – SOS-18-002 – CA Workload Automation AE SQL Injection

The Inteset Secure Lockdown de...
Security Advisory – SOS-18-001 – CA Workload Automation AE RCE

CA Workload Automation AE uses...
Security Advisory – SOS-17-001 – Emsisoft Anti-Malware Behavior Blocker Bypass

The Inteset Secure Lockdown de...
Security Advisory – SOS-15-005 – Microsoft Skype for Business 2016 Unauthorised Script Execution Vulnerability

Current versions of the Micros...
Security Advisory – SOS-15-003 – ClickSoftware ClickMobile Multiple Security Vulnerabilities

ClickSoftware ClickMobile is a...
Security Advisory – SOS-15-004 – ClickSoftware ClickSchedule Multiple Security Vulnerabilities

The ClickSchedule application ...
Security Advisory – SOS-15-002 – XML External Entity Injection (XXE)

An XML External Entity attack ...
Security Advisory – SOS-15-001 – tcpdump Memory Disclosure Vulnerability

tcpdump is a common command li...
Security Advisory – SOS-14-005 – SAP NetWeaver Business Client for HTML Cross-site Scripting Vulnerabilities

Multiple cross-site scripting ...
Security Advisory – SOS-14-004 – SAP Work Manager, SAP CRM Service Manager and iOS Client Multiple Vulnerabilities

Multiple vulnerabilities were ...
Security Advisory – SOS-14-003 – Cisco CUCDM Self Care Portal Multiple Vulnerabilities

Multiple medium risk security ...
Security Advisory – SOS-14-001 – Cisco CUCDM IP Phone Services Multiple Vulnerabilities

The security vulnerabilities f...
Security Advisory – SOS-14-002 – Cisco CUCDM Administration Portal Multiple Vulnerabilities

Multiple high risk security vu...

Latest announcements

Sense of Security will be represented by three team members at RSA APJ 2020

Secure Mobile Application Development Training

Join Alastair MacGibbon and Murray Goldschmidt for our interactive Cyber Dialogue Q&A webinar on the new normal of business and cyber security.

DevOps Security Automation Training

Full Cyber Security Services

Full Risk and Compliance Services

Advisories

Security Advisory – SOS-19-001 – XML External Entities Injection (XXE) in XNAT 1.7

Security Advisory – SOS-18-003 – Inteset Secure Lockdown

Security Advisory – SOS-18-002 – CA Workload Automation AE SQL Injection

Security Advisory – SOS-18-001 – CA Workload Automation AE RCE

Security Advisory – SOS-17-001 – Emsisoft Anti-Malware Behavior Blocker Bypass

Security Advisory – SOS-15-005 – Microsoft Skype for Business 2016 Unauthorised Script Execution Vulnerability

Security Advisory – SOS-15-003 – ClickSoftware ClickMobile Multiple Security Vulnerabilities

Security Advisory – SOS-15-004 – ClickSoftware ClickSchedule Multiple Security Vulnerabilities

Security Advisory – SOS-15-002 – XML External Entity Injection (XXE)

Security Advisory – SOS-15-001 – tcpdump Memory Disclosure Vulnerability

Security Advisory – SOS-14-005 – SAP NetWeaver Business Client for HTML Cross-site Scripting Vulnerabilities

Security Advisory – SOS-14-004 – SAP Work Manager, SAP CRM Service Manager and iOS Client Multiple Vulnerabilities

Security Advisory – SOS-14-003 – Cisco CUCDM Self Care Portal Multiple Vulnerabilities

Security Advisory – SOS-14-001 – Cisco CUCDM IP Phone Services Multiple Vulnerabilities

Security Advisory – SOS-14-002 – Cisco CUCDM Administration Portal Multiple Vulnerabilities

View the archive

Would you like to know more?

If you have any questions, our cyber experts are keen to help. Call us today on 1300 922 923 or send us a message via our contact form today.

Cyber Security for Smart Grids

Security Awareness Training Program for Whole-of-Business

Achieving cyber resilience by reducing your susceptibility to attack

Our Locations

Important links

Resources

Newsletter