oracle scheduler 18c vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv2

Vulnerability in the Scheduler component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure wh...

Oracle Scheduler 11.2.0.4 Oracle Scheduler 12.1.0.2 Oracle Scheduler 12.2.0.1 Oracle Scheduler 18c Oracle Scheduler 19c

6.5

CVSSv2

Vulnerability in the RDBMS Scheduler component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Export Full Database privilege with network access via Oracle...

Oracle Rdbms Scheduler 12.1.0.2 Oracle Rdbms Scheduler 12.2.0.1 Oracle Rdbms Scheduler 18c Oracle Rdbms Scheduler 19c

7.5

CVSSv2

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler up to and including 2.3.0 allows XXE attacks via a job description.

2 Github repositories

4.3

CVSSv2

jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

97 Github repositories

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook