Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

enterprise manager for peoplesoft vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2021-3711
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" paramete...
Openssl OpensslDebian Debian Linux 10.0Debian Debian Linux 11.0Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Storage Encryption -Netapp E-series Santricity Os ControllerOracle Peoplesoft Enterprise Peopletools 8.57Oracle Jd Edwards World Security A9.4Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Session Border Controller 8.4Oracle Enterprise Communications Broker 3.2.0Oracle Zfs Storage Appliance Kit 8.8Oracle Peoplesoft Enterprise Peopletools 8.59
7.5
CVSSv2
CVE-2021-22931
Node.js prior to 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijac...
Nodejs Node.jsNetapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -Netapp Nextgen Api -Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Graalvm 20.3.3Oracle Graalvm 21.2.0Oracle Mysql ClusterSiemens Sinec Infrastructure Network Services
7.5
CVSSv2
CVE-2021-3517
There is a flaw in the xml entity encoding functionality of libxml2 in versions prior to 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most like...
Xmlsoft Libxml2Redhat Jboss Core Services -Redhat Enterprise Linux 8.0Fedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp E-series Santricity Storage Manager -Netapp Clustered Data Ontap Antivirus Connector -Netapp Snapdrive -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Santricity Unified Manager -Netapp Manageability Software Development Kit -Netapp E-series Santricity Web Services -Netapp E-series Santricity Os ControllerNetapp Hci H410c Firmware -
7.5
CVSSv2
CVE-2019-10086
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an malicious user to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of th...
Apache Commons BeanutilsApache Nifi 1.14.0Apache Nifi 1.15.0Debian Debian Linux 8.0Opensuse Leap 15.0Opensuse Leap 15.1Fedoraproject Fedora 30Fedoraproject Fedora 31Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Aus 7.7Redhat Enterprise Linux Server Tus 7.7Redhat Enterprise Linux Eus 7.7Redhat Jboss Enterprise Application Platform 7.2.0Oracle Retail Xstore Point Of Service 15.0Oracle Flexcube Private Banking 12.1.0Oracle Banking Platform 2.4.0Oracle Retail Xstore Point Of Service 7.1Oracle Flexcube Private Banking 12.0.0Oracle Service Bus 11.1.1.9.0Oracle Fusion Middleware 11.1.1.9
7.5
CVSSv2
CVE-2019-2725
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com...
Oracle Weblogic Server 12.1.3.0.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Weblogic Server 10.3.6.0.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.4Oracle Agile Plm 9.3.5Oracle Vm VirtualboxOracle Communications Converged Application Server 5.1Oracle Communications Converged Application Server 7.0Oracle Communications Converged Application Server 7.1Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Storagetek Tape Analytics Sw Tool 2.3Oracle Tape Library Acsls 8.5Oracle Tape Virtual Storage Manager Gui 6.2Oracle Vm Virtualbox 5.2.36
7.5
CVSSv2
CVE-2018-1000613
Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key deserializat...
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-apiNetapp Oncommand Workflow Automation -Opensuse Leap 15.1Oracle Retail Xstore Point Of Service 7.1Oracle Api Gateway 11.1.2.4.0Oracle Enterprise Repository 12.1.3.0.0Oracle Retail Xstore Point Of Service 7.0Oracle Enterprise Repository 11.1.1.7.0Oracle Peoplesoft Enterprise Peopletools 8.55Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Communications Webrtc Session Controller 7.2Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 11.1.1.9.0Oracle Weblogic Server 12.2.1.3Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 11.1.1.9.0Oracle Soa Suite 12.1.3.0.0Oracle Soa Suite 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Managed File Transfer 12.2.1.3.0Oracle Communications Converged Application Server
7.1
CVSSv2
CVE-2022-23437
There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulner...
Apache Xerces-jOracle Ilearning 6.2Oracle Flexcube Universal Banking 12.4.0Oracle Weblogic Server 12.2.1.3.0Oracle Agile Plm 9.3.6Oracle Weblogic Server 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Weblogic Server 14.1.1.0.0Oracle Retail Bulk Data Integration 16.0.3.0Oracle Retail Merchandising System 16.0.3Oracle Global Lifecycle Management Nextgen Oui Framework 13.9.4.2.2Oracle Agile Engineering Data Management 6.2.1.0Oracle Retail Service Backbone 16.0.3Oracle Retail Financial Integration 16.0.3Oracle Retail Integration Bus 16.0.3Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Retail Service Backbone 15.0.3.1Oracle Retail Service Backbone 14.1.3.2Oracle Financial Services Enterprise Case Management 8.0.7.2.0Oracle Banking Party Management 2.7.0Oracle Retail Merchandising System 19.0.1Oracle Retail Integration Bus 14.1.3.2
6.8
CVSSv2
CVE-2021-3518
There's a flaw in libxml2 in versions prior to 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability...
Xmlsoft Libxml2Debian Debian Linux 9.0Redhat Jboss Core Services -Redhat Enterprise Linux 8.0Fedoraproject Fedora 33Fedoraproject Fedora 34Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Snapdrive -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Hci H410c Firmware -Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Mysql WorkbenchOracle Real User Experience Insight 13.4.1.0Oracle Real User Experience Insight 13.5.1.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0
6.5
CVSSv2
CVE-2021-23337
Lodash versions before 4.17.21 are vulnerable to Command Injection via the template function.
Lodash LodashOracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Retail Customer Management And Segmentation Foundation 19.0Oracle Communications Services Gatekeeper 7.0Oracle Enterprise Communications Broker 3.2.0Oracle Primavera Unifier 20.12Oracle Banking Extensibility Workbench 14.3.0Oracle Banking Trade Finance Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera GatewayOracle Communications Session Border Controller 8.4Oracle Communications Session Border Controller 9.0Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Trade Finance Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Corporate Lending Process Management 14.2.0
6.5
CVSSv2
CVE-2018-1258
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.
Pivotal Software Spring SecurityVmware Spring Framework 5.0.5Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.4Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Application Testing Suite 10.1Oracle Application Testing Suite 12.5.0.3Oracle Application Testing Suite 13.1.0.1Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Big Data Discovery 1.6.0Oracle Communications Converged Application ServerOracle Communications Diameter Signaling RouterOracle Communications Network IntegrityOracle Communications Performance Intelligence CenterOracle Communications Services GatekeeperOracle Endeca Information Discovery Integrator 3.1.0Oracle Endeca Information Discovery Integrator 3.2.0Oracle Enterprise Manager For Mysql Database 13.2Oracle Enterprise Manager Ops Center 12.2.2Oracle Enterprise Manager Ops Center 12.3.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-28254CVE-2024-32515CVE-2024-21338validationCVE-2024-32522dosCVE-2024-2101CVE-2024-21107elevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook