Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications cloud native core unified data repository 1.15.0 vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3
CVE-2021-28168
Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which creates a file inside of the system temporary directory with the permissions: -rw-r--r--. Thus the contents...
Eclipse JerseyOracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 1.15.0
5.9
CVSSv3
CVE-2020-14340
A vulnerability exists in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the malicious user to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 up to and including 3.8.1.Final.
Redhat XnioRedhat Xnio 3.6.0Redhat Jboss Operations Network 3.0Redhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Fuse 6.0.0Redhat Jboss Enterprise Application Platform 5.0.0Redhat Jboss Fuse 7.0.0Redhat Jboss Data Grid 7.0.0Redhat Jboss Brms 5Redhat Jboss Soa Platform 5Redhat Jboss Brms 6Redhat Jboss Data Grid 6.0.0Redhat Jboss Data Virtualization 6.0.0Oracle Communications Cloud Native Core Network Repository Function 1.14.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Cloud Native Core Unified Data Repository 1.14.0Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.15.0Oracle Communications Cloud Native Core Console 1.9.0
9.8
CVSSv3
CVE-2022-22963
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Vmware Spring Cloud FunctionOracle Sd-wan Edge 9.0Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Banking Cash Management 14.5Oracle Banking Trade Finance Process Management 14.5Oracle Banking Credit Facilities Process Management 14.5Oracle Banking Corporate Lending Process Management 14.5Oracle Banking Supply Chain Finance 14.5Oracle Sd-wan Edge 9.1Oracle Banking Liquidity Management 14.5Oracle Banking Liquidity Management 14.2Oracle Banking Virtual Account Management 14.5Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Mysql Enterprise MonitorOracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Communications Policy Management 12.6.0.0.0
8.1
CVSSv3
CVE-2021-22901
curl 7.75.0 up to and including 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote c...
Haxx CurlOracle Mysql ServerOracle EssbaseOracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0Oracle Communications Cloud Native Core Network Repository Function 1.15.1Oracle Communications Cloud Native Core Binding Support Function 1.11.0Netapp Cloud Backup -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller Firmware -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Hci Compute Node Firmware -Netapp H300e Firmware -Netapp H300s Firmware -Netapp H410s Firmware -Netapp H500e Firmware -
6.5
CVSSv3
CVE-2021-43797
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the header name. It s...
Netty NettyQuarkus QuarkusNetapp Snapcenter -Netapp Oncommand Workflow Automation -Oracle Banking Platform 2.6.2Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Coherence 12.2.1.4.0Oracle Coherence 14.1.1.0.0Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Banking Party Management 2.7.0Oracle Communications Design Studio 7.4.2Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 1.15.0Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0Oracle Communications Cloud Native Core Binding Support Function 1.11.0Oracle Helidon 2.4.0Oracle Helidon 1.4.10Oracle Communications Instant Messaging Server 8.1Oracle Banking Deposits And Lines Of Credit Servicing 2.7Debian Debian Linux 10.0Debian Debian Linux 11.0
7.5
CVSSv3
CVE-2021-37136
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
Netty NettyQuarkus QuarkusOracle Peoplesoft Enterprise Peopletools 8.48Oracle Webcenter Portal 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Coherence 12.2.1.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Coherence 14.1.1.0.0Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Banking Digital Experience 21.1Oracle Banking ApisOracle Banking Apis 19.1Oracle Banking Apis 19.2
9.8
CVSSv3
CVE-2022-22965
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring FrameworkCisco Cx Cloud AgentOracle Sd-wan Edge 9.0Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Sd-wan Edge 9.1Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Oracle Product Lifecycle Analytics 3.6.1Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 22.1.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0
9.8
CVSSv3
CVE-2021-3711
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" paramete...
Openssl OpensslDebian Debian Linux 10.0Debian Debian Linux 11.0Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Storage Encryption -Netapp E-series Santricity Os ControllerOracle Peoplesoft Enterprise Peopletools 8.57Oracle Jd Edwards World Security A9.4Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Session Border Controller 8.4Oracle Enterprise Communications Broker 3.2.0Oracle Zfs Storage Appliance Kit 8.8Oracle Peoplesoft Enterprise Peopletools 8.59
7.4
CVSSv3
CVE-2021-3712
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Santricity Smi-s Provider -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire -Netapp Hci Management Node -Netapp Manageability Software Development Kit -Netapp Storage Encryption -Netapp E-series Santricity Os ControllerMcafee Epolicy Orchestrator 5.10.0Mcafee Epolicy OrchestratorTenable Tenable.scTenable Nessus Network MonitorOracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Zfs Storage Appliance Kit 8.8Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Mysql ServerOracle Mysql Workbench
6.1
CVSSv3
CVE-2019-10219
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Redhat Hibernate ValidatorRedhat Hibernate Validator 6.1.0Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Jboss Data Grid -Redhat Openshift Application Runtimes -Redhat Fuse 1.0Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Netapp Active Iq Unified Manager -Netapp Element -Netapp Snapcenter Plug-in -Netapp Management Services For Element Software And Netapp Hci -Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Solaris 11Oracle Flexcube Private Banking 12.1.0Oracle Insurance Policy Administration J2ee 10.2.0Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Investor Servicing 12.0.4Oracle Weblogic Server 12.1.3.0.0Oracle Retail Integration Bus 13.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook