oracle commerce platform 11.3.2 vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Oracle Commerce Platform 11.3.0 Oracle Commerce Platform 11.3.1 Oracle Commerce Platform 11.3.2

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

Oracle Commerce Platform 11.3.1 Oracle Commerce Platform 11.3.0 Oracle Commerce Platform 11.3.2

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.0.0, 11.1.0, 11.2.0 and 11.3.0-11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network acc...

Oracle Commerce Platform 11.0.0 Oracle Commerce Platform 11.1.0 Oracle Commerce Platform 11.2.0 Oracle Commerce Platform

A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote malicious users to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.

Apache CXF prior to 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token services, where it does not validate that the authenticated principal is equal to that of the suppli...

Apache Cxf Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Retail Order Broker 15.0 Oracle Enterprise Manager Base Platform 13.2.1.0 Oracle Commerce Guided Search 11.3.2

Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore (JKS/PKCS12)...

Apache Cxf Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Retail Order Broker 15.0 Oracle Communications Diameter Signaling Router Oracle Communications Session Route Manager 8.1.1 Oracle Communications Session Route Manager 8.2.0 Oracle Communications Session Route Manager 8.2.1 Oracle Communications Session Report Manager Oracle Communications Element Manager Oracle Commerce Guided Search 11.3.2

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing ...

Ckeditor Ckeditor Drupal Drupal Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Commerce Merchandising 11.3.2 Oracle Financial Services Trade-based Anti Money Laundering 8.0.7 Oracle Financial Services Trade-based Anti Money Laundering 8.0.8 Fedoraproject Fedora 36 Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0 Oracle Application Express Oracle Financial Services Analytical Applications Infrastructure 8.1.2.1 Oracle Financial Services Behavior Detection Platform Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Behavior Detection Platform 8.0.8.0 Oracle Financial Services Behavior Detection Platform 8.0.7.0 Fedoraproject Fedora 37

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop r...

Ckeditor Ckeditor Drupal Drupal Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Commerce Merchandising 11.3.2 Oracle Financial Services Trade-based Anti Money Laundering 8.0.7 Oracle Financial Services Trade-based Anti Money Laundering 8.0.8 Fedoraproject Fedora 36 Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0 Oracle Application Express Oracle Financial Services Analytical Applications Infrastructure 8.1.2.1 Oracle Financial Services Behavior Detection Platform Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Behavior Detection Platform 8.0.8.0 Oracle Financial Services Behavior Detection Platform 8.0.7.0 Fedoraproject Fedora 37

All versions of Apache Santuario - XML Security for Java before 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an malicious user to abuse an XP...

3 Github repositories

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web page. Please note that...

Apache Cxf Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Retail Order Broker 15.0 Oracle Communications Element Manager 8.2.0 Oracle Communications Element Manager 8.2.1 Oracle Communications Element Manager 8.1.1 Oracle Communications Session Report Manager 8.1.1 Oracle Communications Session Report Manager 8.2.0 Oracle Communications Session Report Manager 8.2.1 Oracle Communications Session Route Manager 8.1.1 Oracle Communications Session Route Manager 8.2.0 Oracle Communications Session Route Manager 8.2.1 Oracle Commerce Guided Search 11.3.2

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook