oracle api gateway 11.1.2.4.0 vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Oracle API Gateway component of Oracle Fusion Middleware (subcomponent: Oracle API Gateway). The supported version that is affected is 11.1.2.4.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to com...

Oracle Api Gateway 11.1.2.4.0

Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and previous versions have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fi...

Bouncycastle Fips Java Api Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api Debian Debian Linux 9.0 Oracle Retail Xstore Point Of Service 7.1 Oracle Api Gateway 11.1.2.4.0 Oracle Weblogic Server 12.1.3.0.0 Oracle Enterprise Repository 12.1.3.0.0 Oracle Retail Xstore Point Of Service 7.0 Oracle Peoplesoft Enterprise Peopletools 8.55 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Webcenter Portal 12.2.1.3.0 Oracle Webcenter Portal 11.1.1.9.0 Oracle Business Process Management Suite 12.1.3.0.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Business Process Management Suite 11.1.1.9.0 Oracle Soa Suite 12.1.3.0.0 Oracle Soa Suite 12.2.1.3.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Managed File Transfer 12.2.1.3.0 Oracle Communications Converged Application Server Oracle Communications Webrtc Session Controller Oracle Retail Convenience And Fuel Pos Software 2.8.1

1 Github repository

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET reques...

Apache Batik Oracle Api Gateway 11.1.2.4.0 Oracle Hyperion Financial Reporting 11.1.2.4 Oracle Enterprise Repository 11.1.1.7.0 Oracle Business Intelligence 12.2.1.3.0 Oracle Retail Order Broker 15.0 Oracle Retail Order Broker 16.0 Oracle Retail Returns Management 14.1 Oracle Retail Point-of-service 14.1 Oracle Business Intelligence 12.2.1.4.0 Oracle Business Intelligence 5.5.0.0.0 Oracle Financial Services Analytical Applications Infrastructure Oracle Fusion Middleware Mapviewer 12.2.1.4.0 Oracle Instantis Enterprisetrack Oracle Communications Offline Mediation Controller 12.0.0.3.0 Oracle Retail Integration Bus 15.0.3 Oracle Communications Application Session Controller 3.9m0p2 Oracle Hospitality Opera 5 5.5 Oracle Hospitality Opera 5 5.6 Oracle Business Intelligence 5.9.0.0.0 Oracle Retail Order Management System Cloud Service 19.5 Oracle Jd Edwards Enterpriseone Tools

1 Github repository

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

1 Github repository

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fi...

1 Github repository

Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key deserializat...

Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api Netapp Oncommand Workflow Automation -Opensuse Leap 15.1 Oracle Retail Xstore Point Of Service 7.1 Oracle Api Gateway 11.1.2.4.0 Oracle Enterprise Repository 12.1.3.0.0 Oracle Retail Xstore Point Of Service 7.0 Oracle Enterprise Repository 11.1.1.7.0 Oracle Peoplesoft Enterprise Peopletools 8.55 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Communications Webrtc Session Controller 7.2 Oracle Webcenter Portal 12.2.1.3.0 Oracle Webcenter Portal 11.1.1.9.0 Oracle Weblogic Server 12.2.1.3 Oracle Business Process Management Suite 12.1.3.0.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Business Process Management Suite 11.1.1.9.0 Oracle Soa Suite 12.1.3.0.0 Oracle Soa Suite 12.2.1.3.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Managed File Transfer 12.2.1.3.0 Oracle Communications Converged Application Server

1 Github repository

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Nodejs Node.js Openssl Openssl Tenable Nessus Oracle Primavera P6 Enterprise Project Portfolio Management 16.2 Oracle Api Gateway 11.1.2.4.0 Oracle Primavera P6 Enterprise Project Portfolio Management 15.1 Oracle Primavera P6 Enterprise Project Portfolio Management 16.1 Oracle Primavera P6 Enterprise Project Portfolio Management 15.2 Oracle Peoplesoft Enterprise Peopletools 8.55 Oracle Primavera P6 Enterprise Project Portfolio Management 8.4 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Enterprise Manager Ops Center 12.3.3 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Primavera P6 Enterprise Project Portfolio Management Oracle Primavera P6 Enterprise Project Portfolio Management 18.8 Oracle Vm Virtualbox

1 EDB exploit1 Github repository

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively n...

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This functi...

5 Github repositories1 Article

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 by...

3 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook