oracle global lifecycle management nextgen oui framework vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Installer issues). Supported versions that are affected are before 13.9.4.2.11. Easily exploitable vulnerability allows low privileged attacker wi...

Oracle Global Lifecycle Management Nextgen Oui Framework

jackson-databind prior to 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

4 Github repositories

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulner...

Apache Xerces-j Oracle Ilearning 6.2 Oracle Flexcube Universal Banking 12.4.0 Oracle Weblogic Server 12.2.1.3.0 Oracle Agile Plm 9.3.6 Oracle Weblogic Server 12.2.1.4.0 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Weblogic Server 14.1.1.0.0 Oracle Retail Bulk Data Integration 16.0.3.0 Oracle Retail Merchandising System 16.0.3 Oracle Global Lifecycle Management Nextgen Oui Framework 13.9.4.2.2 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Retail Service Backbone 16.0.3 Oracle Retail Financial Integration 16.0.3 Oracle Retail Integration Bus 16.0.3 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Retail Service Backbone 15.0.3.1 Oracle Retail Service Backbone 14.1.3.2 Oracle Financial Services Enterprise Case Management 8.0.7.2.0 Oracle Banking Party Management 2.7.0 Oracle Retail Merchandising System 19.0.1 Oracle Retail Integration Bus 14.1.3.2

A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in ...

2 Github repositories

A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, a...

2 Github repositories

A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook