Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle tape library acsls 8.5 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2019-2725
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com...
Oracle Weblogic Server 12.1.3.0.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Weblogic Server 10.3.6.0.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.4Oracle Agile Plm 9.3.5Oracle Vm VirtualboxOracle Communications Converged Application Server 5.1Oracle Communications Converged Application Server 7.0Oracle Communications Converged Application Server 7.1Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Storagetek Tape Analytics Sw Tool 2.3Oracle Tape Library Acsls 8.5Oracle Tape Virtual Storage Manager Gui 6.2Oracle Vm Virtualbox 5.2.36
9.8
CVSSv3
CVE-2019-2729
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
Oracle Identity Manager 11.1.2.3.0Oracle Weblogic Server 12.1.3.0.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Identity Manager 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Rapid Planning 12.1Oracle Communications Diameter Signaling Router 8.2Oracle Communications Diameter Signaling Router 8.2.1Oracle Rapid Planning 12.2Oracle Communications Network IntegrityOracle Hyperion Infrastructure Technology 11.1.2.4Oracle Hyperion Infrastructure Technology 11.2.5.0Oracle Communications Diameter Signaling Router 8.1Oracle Communications Diameter Signaling Router 8.0Oracle Storagetek Tape Analytics Sw Tool 2.3Oracle Tape Library Acsls 8.5
6.1
CVSSv3
CVE-2019-11358
jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Jquery JqueryDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Drupal DrupalBackdropcms BackdropFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0Netapp Snapcenter -Netapp Oncommand System ManagerRedhat Cloudforms 4.7Redhat Virtualization Manager 4.3Oracle Service Bus 12.1.3.0.0Oracle Primavera Unifier 16.2Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Weblogic Server 12.1.3.0.0Oracle Service Bus 11.1.1.9.0Oracle Jdeveloper 11.1.1.9.0Oracle Primavera Unifier 16.1
7.5
CVSSv3
CVE-2018-15756
Spring Framework, version 5.1, versions 5.0.x before 5.0.10, versions 4.3.x before 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annota...
Vmware Spring FrameworkVmware Spring Framework 5.1.0Oracle Flexcube Private Banking 12.1.0Oracle Insurance Policy Administration J2ee 10.2.0Oracle Retail Xstore Point Of Service 7.1Oracle Weblogic Server 12.1.3.0.0Oracle Retail Invoice Matching 13.0Oracle Flexcube Private Banking 12.0.1Oracle Primavera Gateway 16.2Oracle Primavera Gateway 15.2Oracle Retail Invoice Matching 12.0Oracle Flexcube Private Banking 12.0.3Oracle Insurance Rules Palette 10.2.0Oracle Retail Service Backbone 15.0Oracle Retail Integration Bus 15.0Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.2.1.3.0Oracle Communications Unified Inventory Management 7.3Oracle Enterprise Manager Ops Center 12.3.3Oracle Webcenter Sites 12.2.1.3.0Oracle Endeca Information Discovery Integrator 3.2.0Oracle Insurance Rules Palette 10.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook