Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle rest data services vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2020-14744
Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General). Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: before 20.2.1. Easily exploitable vulnerability allows low privileged att...
Oracle Rest Data Services 11.2.0.4Oracle Rest Data Services 12.1.0.2Oracle Rest Data Services 12.2.0.1Oracle Rest Data Services 18cOracle Rest Data Services 19cOracle Rest Data Services
4
CVSSv2
CVE-2020-14745
Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General). Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c; Standalone ORDS: before 20.2.1. Easily exploitable vulnerability allows low privileged att...
Oracle Rest Data Services 11.2.0.4Oracle Rest Data Services 12.1.0.2Oracle Rest Data Services 12.2.0.1Oracle Rest Data Services 18cOracle Rest Data Services 19cOracle Rest Data Services
4.3
CVSSv2
CVE-2021-32014
SheetJS and SheetJS Pro up to and including 0.16.9 allows malicious users to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js.
Sheetjs SheetjsSheetjs Sheetjs ProOracle Rest Data Services
5
CVSSv2
CVE-2017-9735
Jetty up to and including 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote malicious users to obtain access by observing elapsed times before rejection of incorrect passwords.
Eclipse JettyDebian Debian Linux 9.0Oracle Retail Xstore Point Of Service 15.0Oracle Retail Xstore Point Of Service 7.1Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Retail Xstore Point Of Service 16.0Oracle Enterprise Manager Base Platform 13.3Oracle Enterprise Manager Base Platform 13.2Oracle Retail Xstore Point Of Service 17.0Oracle Rest Data Services 12.2.0.1Oracle Rest Data Services 12.1.0.2Oracle Rest Data Services 11.2.0.4Oracle Rest Data Services 18cOracle Communications Cloud Native Core Policy 1.5.0
4.3
CVSSv2
CVE-2021-32012
SheetJS and SheetJS Pro up to and including 0.16.9 allows malicious users to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2).
Sheetjs Project SheetjsSheetjs Project Sheetjs ProOracle Rest Data Services
4.3
CVSSv2
CVE-2021-32013
SheetJS and SheetJS Pro up to and including 0.16.9 allows malicious users to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2).
Sheetjs Project SheetjsSheetjs Project Sheetjs ProOracle Rest Data Services
7.5
CVSSv2
CVE-2017-7657
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size coul...
Eclipse JettyDebian Debian Linux 9.0Netapp Oncommand Unified ManagerNetapp Element Software -Netapp Santricity Cloud Connector -Netapp Element Software Management Node -Netapp E-series Santricity Web Services -Netapp E-series Santricity Management -Netapp Hci Storage Nodes -Netapp E-series Santricity Os ControllerNetapp Oncommand System Manager 3.xNetapp Snap Creator FrameworkNetapp SnapcenterNetapp SnapmanagerHp Xp P9000 Command ViewOracle Retail Xstore Point Of Service 15.0Oracle Retail Xstore Point Of Service 7.1Oracle Retail Xstore Point Of Service 16.0Oracle Retail Xstore Point Of Service 17.0Oracle Rest Data Services 12.2.0.1Oracle Rest Data Services 12.1.0.2Oracle Rest Data Services 11.2.0.4
7.5
CVSSv2
CVE-2017-7658
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the ...
Eclipse JettyDebian Debian Linux 9.0Oracle Retail Xstore Point Of Service 15.0Oracle Retail Xstore Point Of Service 7.1Oracle Retail Xstore Point Of Service 16.0Oracle Retail Xstore Payment 3.3Oracle Retail Xstore Point Of Service 17.0Oracle Rest Data Services 12.2.0.1Oracle Rest Data Services 12.1.0.2Oracle Rest Data Services 11.2.0.4Oracle Rest Data Services 18cHp Xp P9000 Command ViewNetapp Snap Creator Framework -Netapp Santricity Cloud Connector -Netapp Snapcenter -Netapp Snapmanager -Netapp E-series Santricity Web Services -Netapp E-series Santricity Management -Netapp E-series Santricity Os ControllerNetapp Oncommand System ManagerNetapp Solidfire -Netapp Hci Management Node -
5
CVSSv2
CVE-2019-10246
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information revea...
Eclipse Jetty 9.2.27Eclipse Jetty 9.3.26Eclipse Jetty 9.4.16Netapp Snap Creator Framework -Netapp Snapcenter -Netapp Oncommand System ManagerNetapp Snapmanager -Netapp Storage Services Connector -Netapp Virtual Storage ConsoleNetapp Virtual Storage Console 9.6Netapp Storage Replication Adapter For Clustered Data OntapNetapp Storage Replication Adapter For Clustered Data Ontap 9.6Netapp Vasa Provider For Clustered Data OntapNetapp Vasa Provider For Clustered Data Ontap -Netapp Element -Oracle Retail Xstore Point Of Service 15.0Oracle Flexcube Private Banking 12.1.0Oracle Retail Xstore Point Of Service 7.1Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Core Banking 5.2.0Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1
4.3
CVSSv2
CVE-2020-11023
In jQuery versions greater than or equal to 1.0.3 and prior to 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted c...
Jquery JqueryDebian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Drupal DrupalOracle Weblogic Server 12.1.3.0.0Oracle Hyperion Financial Reporting 11.1.2.4Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Communications Operations Monitor 3.4Oracle Weblogic Server 12.2.1.4.0Oracle Webcenter Sites 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Communications Interactive Session RecorderOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Application ExpressOracle Rest Data Services 12.2.0.1Oracle Rest Data Services 12.1.0.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook