oracle middleware common libraries and tools 12.2.1.3.0 vulnerabilities and exploits

(subscribe to this query)

The OWASP Java HTML Sanitizer prior to 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

Owasp Java Html Sanitizer Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12 Oracle Primavera Unifier 21.12 Oracle Middleware Common Libraries And Tools 12.2.1.4.0 Oracle Middleware Common Libraries And Tools 12.2.1.3.0

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.

Apache Xmlbeans Netapp Snap Creator Framework -Netapp Snapmanager -Netapp Oncommand Unified Manager Core Package -Debian Debian Linux 9.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Middleware Common Libraries And Tools 12.2.1.4.0 Oracle Middleware Common Libraries And Tools 12.2.1.3.0

A vulnerability in sshd-core of Apache Mina SSHD allows an malicious user to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0

Apache Sshd Oracle Retail Customer Management And Segmentation Foundation 18.0 Oracle Flexcube Universal Banking Oracle Retail Customer Management And Segmentation Foundation 19.0 Oracle Middleware Common Libraries And Tools 12.2.1.4.0 Oracle Communications Cloud Native Core Console 1.9.0 Oracle Banking Payments 14.5 Oracle Banking Trade Finance 14.5 Oracle Banking Treasury Management 14.5 Oracle Oss Support Tools 2.12.42 Oracle Flexcube Universal Banking 14.5 Oracle Middleware Common Libraries And Tools 14.1.1.0.0 Oracle Middleware Common Libraries And Tools 12.2.1.3.0

jsoup is a Java library for working with HTML. Those using jsoup versions before 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinit...

Jsoup Jsoup Quarkus Quarkus Oracle Webcenter Portal 12.2.1.3.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Flexcube Universal Banking Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Webcenter Portal 12.2.1.4.0 Oracle Primavera Unifier 20.12 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Communications Messaging Server 8.1 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Primavera Unifier 21.12 Oracle Banking Trade Finance 14.5 Oracle Banking Treasury Management 14.5 Oracle Flexcube Universal Banking 14.5 Oracle Hospitality Token Proxy Service 19.2 Oracle Retail Customer Management And Segmentation Foundation Netapp Management Services For Element Software And Netapp Hci -Oracle Middleware Common Libraries And Tools 12.2.1.4.0 Oracle Middleware Common Libraries And Tools 12.2.1.3.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0

OWASP AntiSamy prior to 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for the : character.

Antisamy Project Antisamy Oracle Retail Back Office 14.1 Oracle Retail Back Office 14.0 Oracle Retail Returns Management 14.0 Oracle Retail Returns Management 14.1 Oracle Retail Central Office 14.0 Oracle Retail Central Office 14.1 Oracle Banking Platform 2.6.2 Oracle Banking Platform 2.7.0 Oracle Banking Platform 2.7.1 Oracle Insurance Policy Administration 11.3.0 Oracle Insurance Policy Administration 11.0.2 Oracle Banking Enterprise Default Management 2.12.0 Oracle Banking Enterprise Default Management 2.10.0 Oracle Banking Party Management 2.7.0 Oracle Banking Platform Oracle Banking Enterprise Default Managment Oracle Insurance Policy Administration 11.1.0 Oracle Insurance Policy Administration 11.3.1 Oracle Banking Enterprise Default Management 2.7.0 Oracle Banking Enterprise Default Management 2.7.1 Oracle Banking Enterprise Default Management 2.6.2

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook