Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

j2ee engine core vulnerabilities and exploits

(subscribe to this query)
4.9
CVSSv2
CVE-2010-2347
The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 up to and including 7.02, and Server Core (SERVERCORE) 7.10 up to and including 7.30 allows remote authenticated users to bypass a security check and conduct SMB relay attacks via unspecified vectors.
Sap J2ee Engine Core 7.02Sap J2ee Engine Core 6.40Sap J2ee Engine Core 7.00Sap J2ee Engine Core 7.01Sap Server Core 7.11Sap Server Core 7.30Sap Server Core 7.20Sap Server Core 7.10
4.3
CVSSv2
CVE-2018-2415
SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, 7.50; J2EE Engine Server Core 7.11, 7.30, 7.31, 7.40, 7.50) do not sufficiently encode user controlled inputs, resulting in a content spoofing vulnerability when...
Sap Netweaver Java Web Container And Http Service Engine 7.50Sap Netweaver Java Web Container And Http Service Engine 7.10Sap Netweaver Java Web Container And Http Service Engine 7.11Sap Netweaver Java Web Container And Http Service Engine 7.30Sap Netweaver Java Web Container And Http Service Engine 7.31Sap Netweaver Java Web Container And Http Service Engine 7.40Sap J2ee Engine Server Core 7.30Sap J2ee Engine Server Core 7.31Sap J2ee Engine Server Core 7.40Sap J2ee Engine Server Core 7.50Sap J2ee Engine Server Core 7.11
7.6
CVSSv2
CVE-2020-5398
In Spring Framework, versions 5.2.x before 5.2.3, versions 5.1.x before 5.1.13, and versions 5.0.x before 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attrib...
Vmware Spring FrameworkOracle Flexcube Private Banking 12.1.0Oracle Insurance Policy Administration J2ee 10.2.0Oracle Flexcube Private Banking 12.0.0Oracle Insurance Rules Palette 10.2.0Oracle Retail Service Backbone 15.0Oracle Retail Back Office 14.1Oracle Weblogic Server 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Retail Order Broker 15.0Oracle Retail Order Broker 16.0Oracle Retail Returns Management 14.1Oracle Retail Central Office 14.1Oracle Retail Assortment Planning 15.0Oracle Retail Point-of-service 14.1Oracle Retail Predictive Application Server 15.0.3Oracle Retail Assortment Planning 16.0Oracle Retail Financial Integration 15.0Oracle Retail Financial Integration 16.0Oracle Communications Policy Management 12.5.0Oracle Weblogic Server 12.2.1.4.0Oracle Mysql
7.5
CVSSv2
CVE-2013-7364
An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows remote malicious users to read and write to arbitrary files via unknown vectors.
Sap Netweaver -
4.3
CVSSv2
CVE-2019-10219
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Redhat Hibernate ValidatorRedhat Hibernate Validator 6.1.0Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Jboss Data Grid -Redhat Openshift Application Runtimes -Redhat Fuse 1.0Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Netapp Active Iq Unified Manager -Netapp Element -Netapp Snapcenter Plug-in -Netapp Management Services For Element Software And Netapp Hci -Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Solaris 11Oracle Flexcube Private Banking 12.1.0Oracle Insurance Policy Administration J2ee 10.2.0Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Investor Servicing 12.0.4Oracle Weblogic Server 12.1.3.0.0Oracle Retail Integration Bus 13.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook