Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle healthcare foundation 8.1.0 vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2022-23302
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBi...
Apache Log4jNetapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4jOracle Weblogic Server 12.2.1.3.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Jdeveloper 12.2.1.3.0Oracle Identity Management Suite 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Network Integrity 7.3.6Oracle Business Process Management Suite 12.2.1.4.0Oracle Advanced Supply Chain Planning 12.2Oracle Advanced Supply Chain Planning 12.1Oracle Communications Unified Inventory Management 7.4.1Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Communications Messaging Server 8.1Oracle Business Intelligence 5.9.0.0.0Oracle Healthcare Foundation 8.1.0
9.8
CVSSv3
CVE-2022-23305
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows malicious users to manipulate the SQL by ent...
Apache Log4jNetapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4jOracle Weblogic Server 12.2.1.3.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Jdeveloper 12.2.1.3.0Oracle Identity Management Suite 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Network Integrity 7.3.6Oracle Business Process Management Suite 12.2.1.4.0Oracle Advanced Supply Chain Planning 12.2Oracle Advanced Supply Chain Planning 12.1Oracle Communications Unified Inventory Management 7.4.1Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Communications Messaging Server 8.1Oracle Business Intelligence 5.9.0.0.0Oracle Healthcare Foundation 8.1.0
8.8
CVSSv3
CVE-2022-23307
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
Apache ChainsawApache Log4jQos Reload4jOracle Weblogic Server 12.2.1.3.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Jdeveloper 12.2.1.3.0Oracle Identity Management Suite 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Network Integrity 7.3.6Oracle Business Process Management Suite 12.2.1.4.0Oracle Advanced Supply Chain Planning 12.2Oracle Advanced Supply Chain Planning 12.1Oracle Communications Unified Inventory Management 7.4.1Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Communications Messaging Server 8.1Oracle Business Intelligence 5.9.0.0.0Oracle Healthcare Foundation 8.1.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5
8.3
CVSSv3
CVE-2021-2351
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced N...
Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Investor Servicing 12.0.4Oracle Retail Store Inventory Management 14.1Oracle Ilearning 6.2Oracle Hospitality Suite8 8.10.2Oracle Retail Back Office 14.1Oracle Weblogic Server 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Flexcube Investor Servicing 12.4.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Hospitality Reporting And Analytics 9.1.0Oracle Application Testing Suite 13.3.0.1Oracle Retail Order Broker 16.0Oracle Retail Returns Management 14.1Oracle Retail Central Office 14.1Oracle Banking Platform 2.6.2Oracle Primavera Unifier 18.8Oracle Retail Point-of-service 14.1Oracle Retail Predictive Application Server 15.0.3
7.8
CVSSv3
CVE-2021-22118
In Spring Framework, versions 5.2.x before 5.2.15 and versions 5.3.x before 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been upload...
Vmware Spring FrameworkOracle Retail Order Broker 16.0Oracle Retail Predictive Application Server 15.0.3Oracle Enterprise Data Quality 12.2.1.3.0Oracle Retail Assortment Planning 16.0Oracle Retail Financial Integration 16.0.3Oracle Communications Network Integrity 7.3.6Oracle Retail Integration Bus 16.0.3Oracle Insurance Rules Palette 11.0.2Oracle Insurance Rules Palette 11.1.0Oracle Commerce Guided Search 11.3.2Oracle Communications Element ManagerOracle Communications Interactive Session Recorder 6.4Oracle Communications Unified Inventory Management 7.4.1Oracle DocumakerOracle Enterprise Data Quality 12.2.1.4.0Oracle Healthcare Data Repository 8.1.0Oracle Insurance Policy AdministrationOracle Mysql Enterprise MonitorOracle Retail Customer Management And Segmentation FoundationOracle Communications Brm - Elastic Charging Engine 12.0.0.3Oracle Communications Session Report Manager
5.5
CVSSv3
CVE-2021-28657
A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.
Apache TikaOracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Healthcare Foundation 7.3.0Oracle Primavera Unifier 20.12Oracle Communications Messaging Server 8.1Oracle Healthcare Foundation 8.0.0Oracle Healthcare Foundation 8.1.0
6.1
CVSSv3
CVE-2020-11022
In jQuery versions greater than or equal to 1.2 and prior to 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuer...
Jquery JqueryDrupal DrupalDebian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Weblogic Server 12.1.3.0.0Oracle Jdeveloper 11.1.1.9.0Oracle Retail Back Office 14.1Oracle Retail Back Office 14.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Weblogic Server 10.3.6.0.0Oracle Communications Webrtc Session Controller 7.2Oracle Weblogic Server 12.2.1.3.0Oracle Agile Product Lifecycle Management For Process 6.2.0.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Application Testing Suite 13.3.0.1Oracle Retail Returns Management 14.0Oracle Retail Returns Management 14.1Oracle Jdeveloper 12.2.1.3.0Oracle Policy Automation Connector For Siebel 10.4.6Oracle Financial Services Market Risk Measurement And Management 8.0.6
6.1
CVSSv3
CVE-2019-10219
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Redhat Hibernate ValidatorRedhat Hibernate Validator 6.1.0Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Jboss Data Grid -Redhat Openshift Application Runtimes -Redhat Fuse 1.0Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Netapp Active Iq Unified Manager -Netapp Element -Netapp Snapcenter Plug-in -Netapp Management Services For Element Software And Netapp Hci -Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Solaris 11Oracle Flexcube Private Banking 12.1.0Oracle Insurance Policy Administration J2ee 10.2.0Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Investor Servicing 12.0.4Oracle Weblogic Server 12.1.3.0.0Oracle Retail Integration Bus 13.0
6.1
CVSSv3
CVE-2019-11358
jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Jquery JqueryDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Drupal DrupalBackdropcms BackdropFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0Netapp Snapcenter -Netapp Oncommand System ManagerRedhat Cloudforms 4.7Redhat Virtualization Manager 4.3Oracle Service Bus 12.1.3.0.0Oracle Primavera Unifier 16.2Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Weblogic Server 12.1.3.0.0Oracle Service Bus 11.1.1.9.0Oracle Jdeveloper 11.1.1.9.0Oracle Primavera Unifier 16.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook