oracle communications cloud native core network slice selection function 1.2.1 vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service.

Apache Thrift Apache Hive Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1 Oracle Communications Cloud Native Core Policy 1.14.0

5.3

CVSSv3

In JetBrains Kotlin prior to 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

Jetbrains Kotlin Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1 Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0

5

CVSSv3

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and...

Kubernetes Kubernetes Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0 Oracle Communications Cloud Native Core Policy 1.15.0

14 Github repositories1 Article

7.5

CVSSv3

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language ...

Apache Thrift Redhat Jboss Enterprise Application Platform 7.2.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1

7.5

CVSSv3

In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data.

Apache Thrift Redhat Jboss Enterprise Application Platform 7.2.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1

4.3

CVSSv3

The MediaWiki "Report" extension has a Cross-Site Request Forgery (CSRF) vulnerability. Before fixed version, there was no protection against CSRF checks on Special:Report, so requests to report a revision could be forged. The problem has been fixed in commit f828dc6 by...

Report Project Report Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1 Oracle Communications Pricing Design Center 12.0.0.4.0 Oracle Communications Pricing Design Center 12.0.0.5.0

3.3

CVSSv3

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the ...

4 Github repositories

9.8

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.2 lacks certain net.sf.ehcache blocking.

Fasterxml Jackson-databind Oracle Retail Xstore Point Of Service 15.0 Oracle Primavera Unifier 16.2 Oracle Primavera Unifier 16.1 Oracle Weblogic Server 12.2.1.3.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Retail Xstore Point Of Service 16.0 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Weblogic Server 12.2.1.4.0 Oracle Enterprise Manager Base Platform 13.3.0.0 Oracle Primavera Unifier 19.12 Oracle Webcenter Portal 12.2.1.4.0 Oracle Enterprise Manager Base Platform 13.4.0.0 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Retail Xstore Point Of Service 17.0 Oracle Retail Xstore Point Of Service 18.0 Oracle Retail Xstore Point Of Service 19.0 Oracle Communications Billing And Revenue Management 12.0.0.3.0 Oracle Communications Billing And Revenue Management 7.5.0.23.0 Oracle Global Lifecycle Management Opatch Oracle Trace File Analyzer 19c

9.8

CVSSv3

A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in ...

2 Github repositories

8.1

CVSSv3

An issue exists in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.

Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.66 Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.65 Apache Karaf 4.3.2 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Webcenter Portal 12.2.1.3.0 Oracle Webcenter Portal 11.1.1.9.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Utilities Framework 4.3.0.6.0 Oracle Utilities Framework 4.4.0.0.0 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Webcenter Portal 12.2.1.4.0 Oracle Utilities Framework 4.4.0.2.0 Oracle Banking Extensibility Workbench 14.3.0 Oracle Banking Virtual Account Management 14.3.0 Oracle Banking Credit Facilities Process Management 14.3.0 Oracle Banking Corporate Lending Process Management 14.3.0 Oracle Communications Messaging Server 8.1 Oracle Commerce Guided Search 11.3.2 Oracle Communications Messaging Server 8.0.2 Oracle Utilities Framework 4.4.0.3.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1 Oracle Communications Pricing Design Center 12.0.0.3.0

2 Github repositories

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook