Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle sql developer vulnerabilities and exploits

(subscribe to this query)
2.8
CVSSv3
CVE-2020-14740
Vulnerability in the SQL Developer Install component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows low privileged attacker having Client Computer User Account privilege with logon ...
Oracle Sql Developer 11.2.0.4Oracle Sql Developer 12.1.0.2Oracle Sql Developer 12.2.0.1Oracle Sql Developer 18c
6.7
CVSSv3
CVE-2023-21969
Vulnerability in Oracle SQL Developer (component: Installation). Supported versions that are affected are before 23.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle SQL Developer executes to compromise Oracle SQL ...
Oracle Sql Developer
5.3
CVSSv3
CVE-2020-13956
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
Apache HttpclientQuarkus QuarkusOracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Primavera Unifier 18.8Oracle Data Integrator 12.2.1.3.0Oracle Primavera UnifierOracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Data Integrator 12.2.1.4.0Oracle Primavera Unifier 20.12Oracle Peoplesoft Enterprise Pt Peopletools 8.57Oracle Nosql DatabaseOracle Peoplesoft Enterprise Pt Peopletools 8.59Oracle Peoplesoft Enterprise Pt Peopletools 8.58Oracle Retail Customer Management And Segmentation FoundationOracle Sql DeveloperOracle Spatial StudioOracle Jd Edwards Enterpriseone ToolsOracle Jd Edwards Enterpriseone OrchestratorNetapp Snapcenter -
5.9
CVSSv3
CVE-2021-45105
Apache Log4j2 versions 2.0-alpha1 up to and including 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted strin...
Apache Log4jNetapp Cloud Manager -Debian Debian Linux 10.0Debian Debian Linux 11.0Sonicwall Network Security ManagerSonicwall Email SecuritySonicwall Web Application FirewallSonicwall 6bk1602-0aa12-0tp0 FirmwareSonicwall 6bk1602-0aa22-0tp0 FirmwareSonicwall 6bk1602-0aa32-0tp0 FirmwareSonicwall 6bk1602-0aa42-0tp0 FirmwareSonicwall 6bk1602-0aa52-0tp0 FirmwareOracle E-business Suite 12.2Oracle Retail Back Office 14.1Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Managed File Transfer 12.2.1.3.0Oracle Retail Order Broker 16.0Oracle Retail Integration Bus 14.1.3Oracle Retail Returns Management 14.1Oracle Retail Central Office 14.1
9.8
CVSSv3
CVE-2022-23221
H2 Console prior to 2.1.210 allows remote malicious users to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.
H2database H2Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Oracle Communications Cloud Native Core Console 1.9.0
9.8
CVSSv3
CVE-2021-42392
The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited thr...
H2database H2Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Oracle Communications Cloud Native Core Policy 1.15.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook