oracle clusterware 12.1.0.2.0 vulnerabilities and exploits

(subscribe to this query)

An issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.

Fasterxml Jackson-databind Redhat Openshift Container Platform 3.11 Redhat Openshift Container Platform 4.1 Oracle Retail Customer Management And Segmentation Foundation 17.0 Oracle Clusterware 12.1.0.2.0 Oracle Global Lifecycle Management Opatch Oracle Utilities Advanced Spatial And Operational Analytics 2.7.0.1 Oracle Communications Instant Messaging Server 10.0.1.2.0

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.

Fasterxml Jackson-databind Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Primavera Unifier 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 15.1 Oracle Database Server 12.1.0.2 Oracle Banking Platform 2.5.0 Oracle Primavera Unifier 16.1 Oracle Database Server 11.2.0.4 Oracle Primavera P6 Enterprise Project Portfolio Management 16.1 Oracle Jdeveloper 12.1.3.0.0 Oracle Primavera P6 Enterprise Project Portfolio Management 15.2 Oracle Retail Merchandising System 16.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Database Server 12.2.0.1 Oracle Business Process Management Suite 12.1.3.0.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Primavera P6 Enterprise Project Portfolio Management Oracle Primavera P6 Enterprise Project Portfolio Management 18.8 Oracle Database Server 18c Oracle Communications Billing And Revenue Management 7.5

Fasterxml Jackson version prior to 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very la...

Fasterxml Jackson-modules-java8 Oracle Database Server 12.1.0.2 Oracle Database Server 12.2.0.1 Oracle Database Server 18c Oracle Database Server 19c Oracle Clusterware 12.1.0.2.0 Oracle Global Lifecycle Management Opatch Oracle Nosql Database Netapp Active Iq Unified Manager

Vulnerability in the Oracle Clusterware component of Oracle Support Tools (subcomponent: Trace File Analyzer (TFA) Collector). The supported version that is affected is 12.1.0.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

Oracle Clusterware 12.1.0.2.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook