Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle enterprise manager for storage management 13.4.0.0 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2021-23839
OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS ve...
Openssl OpensslOracle Business Intelligence 12.2.1.3.0Oracle Jd Edwards World Security A9.4Oracle Business Intelligence 12.2.1.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Enterprise Manager For Storage Management 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Zfs Storage Appliance Kit 8.8Oracle Graalvm 19.3.5Oracle Graalvm 20.3.1.2Oracle Graalvm 21.0.0.2Oracle Business Intelligence 5.9.0.0.0Siemens Sinec Ins 1.0Siemens Sinec Ins
5
CVSSv2
CVE-2020-1967
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or u...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Freebsd Freebsd 12.1Fedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Jd Edwards World Security A9.4Oracle Enterprise Manager Ops Center 12.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle MysqlOracle Enterprise Manager Base Platform 13.4.0.0Oracle Mysql Enterprise MonitorOracle Mysql WorkbenchOracle Http Server 12.2.1.4.0Oracle Enterprise Manager For Storage Management 13.3.0.0Oracle Mysql ConnectorsOracle Enterprise Manager For Storage Management 13.4.0.0Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Application Server 12.1.3
4.3
CVSSv2
CVE-2020-1971
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This functi...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Api Gateway 11.1.2.4.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Business Intelligence 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Jd Edwards World Security A9.4Oracle Business Intelligence 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Business Intelligence 5.5.0.0.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Http Server 12.2.1.4.0Oracle Enterprise Manager For Storage Management 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle MysqlOracle Graalvm 19.3.4Oracle Graalvm 20.3.0Oracle Essbase 21.2
4.3
CVSSv2
CVE-2021-23841
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (whi...
Openssl OpensslDebian Debian Linux 10.0Tenable Tenable.scTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Apple MacosApple Iphone OsApple SafariApple IpadosNetapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Oracle Business Intelligence 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Jd Edwards World Security A9.4Oracle Business Intelligence 12.2.1.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager For Storage Management 13.4.0.0
7.5
CVSSv2
CVE-2021-3517
There is a flaw in the xml entity encoding functionality of libxml2 in versions prior to 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most like...
Xmlsoft Libxml2Redhat Jboss Core Services -Redhat Enterprise Linux 8.0Fedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp E-series Santricity Storage Manager -Netapp Clustered Data Ontap Antivirus Connector -Netapp Snapdrive -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Santricity Unified Manager -Netapp Manageability Software Development Kit -Netapp E-series Santricity Web Services -Netapp E-series Santricity Os ControllerNetapp Hci H410c Firmware -
5
CVSSv2
CVE-2021-23840
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be...
Openssl OpensslDebian Debian Linux 10.0Tenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Tenable Log Correlation EngineOracle Business Intelligence 12.2.1.3.0Oracle Jd Edwards World Security A9.4Oracle Business Intelligence 12.2.1.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Enterprise Manager For Storage Management 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Graalvm 20.3.1.2Oracle Graalvm 21.0.0.2Oracle Graalvm 19.3.5Oracle Mysql ServerOracle Nosql DatabaseOracle Jd Edwards Enterpriseone ToolsOracle Business Intelligence 5.9.0.0.0Oracle Communications Cloud Native Core Policy 1.15.0
6.8
CVSSv2
CVE-2020-11620
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified ManagerOracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Primavera Unifier 19.12Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Retail Sales Audit 14.1Oracle Communications Evolved Communications Application Server 7.1
6.8
CVSSv2
CVE-2020-11111
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Primavera Unifier 19.12Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Retail Xstore Point Of Service 17.0
6.8
CVSSv2
CVE-2020-11619
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified ManagerOracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Primavera Unifier 19.12Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Communications Diameter Signaling Router
7.5
CVSSv2
CVE-2019-20330
FasterXML jackson-databind 2.x prior to 2.9.10.2 lacks certain net.sf.ehcache blocking.
Fasterxml Jackson-databindOracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Global Lifecycle Management OpatchOracle Trace File Analyzer 19c
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook