oracle primavera gateway 19.12.0 vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component: WebUI). Supported versions that are affected are 18.8.0-18.8.15, 19.12.0-19.12.15, 20.12.0-20.12.10 and 21.12.0-21.12.8. Easily exploitable vulnerability allows low privileged attack...

Oracle Primavera Gateway

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text...

Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.

Connect2id Nimbus Jose\\+jwt Apache Hadoop 3.2.1 Oracle Solaris Cluster 4.0 Oracle Weblogic Server 12.2.1.3.0 Oracle Weblogic Server 12.2.1.4.0 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Enterprise Manager Base Platform 13.4.0.0 Oracle Primavera Gateway 19.12.0 Oracle Data Integrator 12.2.1.4.0 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Primavera Gateway Oracle Communications Pricing Design Center 12.0.0.3.0 Oracle Jd Edwards Enterpriseone Tools Oracle Policy Automation Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0 Oracle Insurance Policy Administration Oracle Healthcare Data Repository 8.1.0 Oracle Jd Edwards Enterpriseone Orchestrator

A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in ...

2 Github repositories

A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, a...

2 Github repositories

A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an...

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Co...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook