Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle siebel core - server framework vulnerabilities and exploits

(subscribe to this query)
6.6
CVSSv3
CVE-2021-44832
Apache Log4j2 versions 2.0-beta7 up to and including 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the tar...
Apache Log4j 2.0Apache Log4jOracle Weblogic Server 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Weblogic Server 12.2.1.4.0Oracle Primavera Unifier 19.12Oracle Weblogic Server 14.1.1.0.0Oracle Primavera Unifier 20.12Oracle Communications Interactive Session Recorder 6.3Oracle Communications Interactive Session Recorder 6.4Oracle Primavera GatewayOracle Retail Assortment Planning 16.0.3Oracle Primavera Unifier 21.12Oracle Primavera P6 Enterprise Project Portfolio Management 21.12.0.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera Gateway 21.12.0Oracle Retail Fiscal Management 14.2Oracle Siebel Ui Framework 21.12Oracle Communications Diameter Signaling RouterCisco Cloudcenter 4.10.0.16Fedoraproject Fedora 34Fedoraproject Fedora 35
5.9
CVSSv3
CVE-2021-45105
Apache Log4j2 versions 2.0-alpha1 up to and including 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted strin...
Apache Log4jNetapp Cloud Manager -Debian Debian Linux 10.0Debian Debian Linux 11.0Sonicwall Network Security ManagerSonicwall Email SecuritySonicwall Web Application FirewallSonicwall 6bk1602-0aa12-0tp0 FirmwareSonicwall 6bk1602-0aa22-0tp0 FirmwareSonicwall 6bk1602-0aa32-0tp0 FirmwareSonicwall 6bk1602-0aa42-0tp0 FirmwareSonicwall 6bk1602-0aa52-0tp0 FirmwareOracle E-business Suite 12.2Oracle Retail Back Office 14.1Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Managed File Transfer 12.2.1.3.0Oracle Retail Order Broker 16.0Oracle Retail Integration Bus 14.1.3Oracle Retail Returns Management 14.1Oracle Retail Central Office 14.1
4.4
CVSSv3
CVE-2021-2353
Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Loging). Supported versions that are affected are 21.5 and Prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel Core - Ser...
Oracle Siebel Core - Server Framework
3.5
CVSSv3
CVE-2021-34428
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this c...
Eclipse JettyDebian Debian Linux 10.0Netapp Snap Creator Framework -Netapp Santricity Cloud Connector -Netapp Snapmanager -Netapp E-series Santricity Web Services -Netapp Active Iq Unified Manager -Netapp E-series Santricity Os ControllerNetapp Element Plug-in For Vcenter Server -Oracle Communications Services Gatekeeper 7.0Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Siebel Core - AutomationOracle Communications Session Route ManagerOracle Communications Element Manager 8.2.2Oracle Rest Data ServicesOracle Communications Session Report Manager
7
CVSSv3
CVE-2021-25329
The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note tha...
Apache Tomcat 9.0.0Apache Tomcat 10.0.0Apache TomcatDebian Debian Linux 9.0Debian Debian Linux 10.0Oracle Managed File Transfer 12.2.1.3.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.6Oracle Database 12.2.0.1Oracle Database 19cOracle Managed File Transfer 12.2.1.4.0Oracle Siebel Ui FrameworkOracle Mysql Enterprise MonitorOracle Graph Server And ClientOracle Database 21cOracle Siebel Ui Framework 21.9Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Instant Messaging Server 10.0.1.5.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.6.0
7.5
CVSSv3
CVE-2021-25122
When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results...
Apache Tomcat 9.0.0Apache Tomcat 10.0.0Apache TomcatDebian Debian Linux 9.0Debian Debian Linux 10.0Oracle Managed File Transfer 12.2.1.3.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.6Oracle Database 12.2.0.1Oracle Database 19cOracle Managed File Transfer 12.2.1.4.0Oracle Siebel Ui FrameworkOracle Mysql Enterprise MonitorOracle Graph Server And ClientOracle Graph Server And Client 21.3.0Oracle Database 21cOracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Instant Messaging Server 10.0.1.5.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.6.0
7.6
CVSSv3
CVE-2021-2039
Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Search). Supported versions that are affected are 20.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core -...
Oracle Siebel Core - Server Framework
4.8
CVSSv3
CVE-2020-27218
In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request ...
Eclipse Jetty 11.0.0Eclipse Jetty 10.0.0Eclipse JettyNetapp Snap Creator Framework -Netapp Oncommand System ManagerOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Rest Data ServicesOracle Communications Converged Application Server - Service Controller 6.2Oracle Communications Session Route ManagerOracle Siebel Core - AutomationOracle Retail Eftlink 20.0.0Oracle Hyperion Infrastructure Technology 11.1.2.6.0Oracle Blockchain PlatformApache Kafka 2.7.0Apache Spark 2.4.8Apache Spark 3.0.3Debian Debian Linux 10.0
7
CVSSv3
CVE-2020-27216
In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creatin...
Eclipse Jetty 11.0.0Eclipse Jetty 10.0.0Eclipse JettyNetapp Snap Creator Framework -Netapp Snapcenter -Netapp Vasa ProviderNetapp Virtual Storage ConsoleNetapp Storage Replication AdapterOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Communications Element ManagerOracle Flexcube Core BankingOracle Communications Application Session Controller 3.9m0p2Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Jd Edwards Enterpriseone ToolsOracle Communications Converged Application Server - Service Controller 6.2Oracle Siebel Core - AutomationApache Beam 2.21.0Apache Beam 2.22.0Apache Beam 2.23.0
8.1
CVSSv3
CVE-2020-24750
FasterXML jackson-databind 2.x prior to 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.
Fasterxml Jackson-databindOracle Application Testing Suite 13.3.0.1Oracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Communications Diameter Signaling RouterOracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Communications Contacts Server 8.0.0.5.0Oracle Communications Calendar Server 8.0.0.4.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Siebel Core - Server FrameworkOracle Communications Unified Inventory Management 7.4.1Oracle Communications Element ManagerOracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Supply Chain Finance 14.5.0Oracle Banking Supply Chain Finance 14.3.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook