oracle enterprise manager for virtualization 13.2.2 vulnerabilities and exploits

(subscribe to this query)

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.

Fasterxml Jackson-databind Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Primavera Unifier 16.2 Oracle Jd Edwards Enterpriseone Tools 9.2 Oracle Primavera P6 Enterprise Project Portfolio Management 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 15.1 Oracle Banking Platform 2.5.0 Oracle Primavera Unifier 16.1 Oracle Primavera P6 Enterprise Project Portfolio Management 16.1 Oracle Jdeveloper 12.1.3.0.0 Oracle Primavera P6 Enterprise Project Portfolio Management 15.2 Oracle Retail Merchandising System 16.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Business Process Management Suite 12.1.3.0.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Primavera P6 Enterprise Project Portfolio Management Oracle Primavera P6 Enterprise Project Portfolio Management 18.8 Oracle Jd Edwards Enterpriseone Orchestrator 9.2 Oracle Communications Billing And Revenue Management 7.5 Oracle Communications Billing And Revenue Management 12.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.2

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.

Fasterxml Jackson-databind Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Primavera Unifier 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 15.1 Oracle Database Server 12.1.0.2 Oracle Banking Platform 2.5.0 Oracle Primavera Unifier 16.1 Oracle Database Server 11.2.0.4 Oracle Primavera P6 Enterprise Project Portfolio Management 16.1 Oracle Jdeveloper 12.1.3.0.0 Oracle Primavera P6 Enterprise Project Portfolio Management 15.2 Oracle Retail Merchandising System 16.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Database Server 12.2.0.1 Oracle Business Process Management Suite 12.1.3.0.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Primavera P6 Enterprise Project Portfolio Management Oracle Primavera P6 Enterprise Project Portfolio Management 18.8 Oracle Database Server 18c Oracle Communications Billing And Revenue Management 7.5

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.

Fasterxml Jackson-databind 2.7.0 Fasterxml Jackson-databind Fasterxml Jackson-databind 2.8.0 Fasterxml Jackson-databind 2.9.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Primavera Unifier 16.2 Oracle Banking Platform 2.5.0 Oracle Primavera Unifier 16.1 Oracle Jdeveloper 12.1.3.0.0 Oracle Retail Merchandising System 16.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Primavera Unifier Oracle Communications Billing And Revenue Management 7.5 Oracle Communications Billing And Revenue Management 12.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.2 Oracle Financial Services Analytical Applications Infrastructure 8.0.3 Oracle Financial Services Analytical Applications Infrastructure 8.0.4 Oracle Financial Services Analytical Applications Infrastructure 8.0.5 Oracle Financial Services Analytical Applications Infrastructure 8.0.6 Oracle Financial Services Analytical Applications Infrastructure 8.0.7 Oracle Banking Platform 2.6.0

FasterXML jackson-databind 2.x prior to 2.9.7 might allow malicious users to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.

Fasterxml Jackson-databind 2.7.0 Fasterxml Jackson-databind Fasterxml Jackson-databind 2.8.0 Fasterxml Jackson-databind 2.9.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Primavera Unifier 16.2 Oracle Banking Platform 2.5.0 Oracle Primavera Unifier 16.1 Oracle Jdeveloper 12.1.3.0.0 Oracle Retail Merchandising System 16.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Primavera Unifier Oracle Communications Billing And Revenue Management 7.5 Oracle Communications Billing And Revenue Management 12.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.2 Oracle Financial Services Analytical Applications Infrastructure 8.0.3 Oracle Financial Services Analytical Applications Infrastructure 8.0.4 Oracle Financial Services Analytical Applications Infrastructure 8.0.5 Oracle Financial Services Analytical Applications Infrastructure 8.0.6 Oracle Financial Services Analytical Applications Infrastructure 8.0.7 Oracle Banking Platform 2.6.0

In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload.

Apache Struts Netapp Oncommand Balance -Oracle Retail Xstore Point Of Service 7.1.6 Oracle Retail Xstore Point Of Service 15.0.1 Oracle Retail Xstore Point Of Service 16.0.2 Oracle Jd Edwards Enterpriseone Tools 9.2 Oracle Weblogic Server 12.2.1.3 Oracle Enterprise Manager For Virtualization 13.2.3 Oracle Agile Plm Framework 9.3.6 Oracle Retail Xstore Point Of Service 6.5.11 Oracle Webcenter Portal 12.2.1.3.0 Oracle Global Lifecycle Management Opatchauto Oracle Financial Services Hedge Management And Ifrs Valuations 8.0.4 Oracle Financial Services Hedge Management And Ifrs Valuations 8.0.5 Oracle Financial Services Market Risk Measurement And Management 8.0.5 Oracle Weblogic Server 12.2.1.2 Oracle Enterprise Manager For Virtualization 13.2.2 Oracle Retail Order Broker 5.2 Oracle Retail Xstore Point Of Service 7.0.6 Oracle Webcenter Portal 12.2.1.2.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook