Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle autovue for agile product lifecycle management 21.0.2 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2021-45105
Apache Log4j2 versions 2.0-alpha1 up to and including 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted strin...
Apache Log4jNetapp Cloud Manager -Debian Debian Linux 10.0Debian Debian Linux 11.0Sonicwall Network Security ManagerSonicwall Email SecuritySonicwall Web Application FirewallSonicwall 6bk1602-0aa12-0tp0 FirmwareSonicwall 6bk1602-0aa22-0tp0 FirmwareSonicwall 6bk1602-0aa32-0tp0 FirmwareSonicwall 6bk1602-0aa42-0tp0 FirmwareSonicwall 6bk1602-0aa52-0tp0 FirmwareOracle E-business Suite 12.2Oracle Retail Back Office 14.1Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Managed File Transfer 12.2.1.3.0Oracle Retail Order Broker 16.0Oracle Retail Integration Bus 14.1.3Oracle Retail Returns Management 14.1Oracle Retail Central Office 14.1
5
CVSSv2
CVE-2021-34429
For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-281...
Eclipse JettyNetapp Snap Creator Framework -Netapp Solidfire -Netapp Hci Management Node -Netapp E-series Santricity Web Services -Netapp Snapcenter Plug-in -Netapp E-series Santricity Os ControllerNetapp Element Plug-in For Vcenter Server -Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Retail Eftlink 20.0.1Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Diameter Signaling RouterOracle Communications Cloud Native Core Unified Data Repository 1.14.0Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.5.0Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0Oracle Rest Data ServicesOracle Stream AnalyticsOracle Stream Analytics 19c
3.6
CVSSv2
CVE-2021-34428
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this c...
Eclipse JettyDebian Debian Linux 10.0Netapp Snap Creator Framework -Netapp Santricity Cloud Connector -Netapp Snapmanager -Netapp E-series Santricity Web Services -Netapp Active Iq Unified Manager -Netapp E-series Santricity Os ControllerNetapp Element Plug-in For Vcenter Server -Oracle Communications Services Gatekeeper 7.0Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Siebel Core - AutomationOracle Communications Session Route ManagerOracle Communications Element Manager 8.2.2Oracle Rest Data ServicesOracle Communications Session Report Manager
4
CVSSv2
CVE-2021-28163
In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that m...
Eclipse Jetty 11.0.0Eclipse Jetty 10.0.0Eclipse Jetty 11.0.1Eclipse Jetty 10.0.1Eclipse JettyFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Apache Solr 8.8.1Apache IgniteNetapp Santricity Cloud Connector -Netapp Snapcenter -Netapp E-series Performance Analyzer -Netapp E-series Santricity Web Services -Netapp Virtual Storage ConsoleNetapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data OntapNetapp Cloud Manager -Netapp Snapcenter Plug-in -Netapp Element Plug-in For Vcenter Server -Netapp E-series Santricity Os ControllerOracle Banking Digital Experience 20.1
5
CVSSv2
CVE-2021-28164
In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web....
Eclipse Jetty 9.4.37Eclipse Jetty 9.4.38Netapp Santricity Cloud Connector -Netapp Snapcenter -Netapp E-series Performance Analyzer -Netapp E-series Santricity Web Services -Netapp Virtual Storage ConsoleNetapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data OntapNetapp Cloud Manager -Netapp Snapcenter Plug-in -Netapp E-series Santricity Os ControllerNetapp Element Plug-in For Vcenter Server -Oracle Banking Digital Experience 20.1Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Siebel Core - AutomationOracle Communications Session Route ManagerOracle Banking Digital Experience 21.1Oracle Banking Apis 20.1Oracle Banking Apis 21.1
7.8
CVSSv2
CVE-2021-28165
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
Eclipse JettyOracle Communications Services Gatekeeper 7.0Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Siebel Core - AutomationOracle Communications Element Manager 8.2.2Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Session Report ManagerOracle Communications Session Route ManagerOracle Rest Data ServicesJenkins JenkinsNetapp Santricity Cloud Connector -Netapp E-series Santricity Os ControllerNetapp E-series Performance AnalyzerNetapp SnapcenterNetapp E-series Santricity StorageNetapp Santricity Web Services ProxyNetapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data OntapNetapp E-series Santricity Web ServicesNetapp Ontap ToolsNetapp Cloud Manager
6.8
CVSSv2
CVE-2020-36179
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.
Netapp Cloud Backup -Netapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Goldengate Application Adapters 19.1.0.0.0Oracle Data Integrator 12.2.1.4.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0Oracle Insurance Rules Palette 11.0.2Oracle Commerce Platform
6.8
CVSSv2
CVE-2020-36180
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.
Netapp Cloud Backup -Netapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 17.2Oracle Application Testing Suite 13.3.0.1Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Goldengate Application Adapters 19.1.0.0.0Oracle Data Integrator 12.2.1.4.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0Oracle Insurance Rules Palette 11.0.2
6.8
CVSSv2
CVE-2020-36182
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.
Fasterxml Jackson-databindNetapp Cloud Backup -Netapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 17.2Oracle Application Testing Suite 13.3.0.1Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Goldengate Application Adapters 19.1.0.0.0Oracle Data Integrator 12.2.1.4.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0
6.8
CVSSv2
CVE-2020-36183
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.
Fasterxml Jackson-databindNetapp Cloud Backup -Netapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 17.2Oracle Application Testing Suite 13.3.0.1Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Goldengate Application Adapters 19.1.0.0.0Oracle Data Integrator 12.2.1.4.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook