Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle commerce platform 11.3.2 vulnerabilities and exploits

(subscribe to this query)

5.5
CVE-2022-21559
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows low privileged attacker with logon to the...
Oracle Commerce Platform 11.3.1Oracle Commerce Platform 11.3.0Oracle Commerce Platform 11.3.2
5.3
CVSSv3
CVE-2022-21387
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...
Oracle Commerce Platform 11.3.0Oracle Commerce Platform 11.3.1Oracle Commerce Platform 11.3.2
9.8
CVSSv3
CVE-2021-2463
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.0.0, 11.1.0, 11.2.0 and 11.3.0-11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network...
Oracle Commerce Platform 11.0.0Oracle Commerce Platform 11.1.0Oracle Commerce Platform 11.2.0Oracle Commerce Platform
6.1
CVSSv3
CVE-2020-27193
A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs....
Ckeditor Ckeditor 4.15.0Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Application ExpressOracle Banking Party Management 2.7.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.8.0Oracle Banking Platform 2.9.0Oracle Commerce Merchandising 11.0.0Oracle Commerce Merchandising 11.1.0Oracle Commerce Merchandising 11.2.0Oracle Commerce Merchandising 11.3.0Oracle Commerce Merchandising 11.3.1Oracle Commerce Merchandising 11.3.2Oracle Financial Services Analytical Applications InfrastructureOracle Financial Services Analytical Applications Infrastructure 8.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Jd Edwards Enterpriseone ToolsOracle Peoplesoft Enterprise Peopletools 8.56Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58
9.8
CVSSv3
CVE-2019-12419
Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token services, where it does not validate that the authenticated principal is equal to that of the...
Apache CxfOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Retail Order Broker 15.0Oracle Enterprise Manager Base Platform 13.2.1.0Oracle Commerce Guided Search 11.3.2
5.4
CVSSv3
CVE-2022-24728
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing...
Ckeditor CkeditorDrupal DrupalOracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Commerce Merchandising 11.3.2Oracle Financial Services Trade-based Anti Money Laundering 8.0.7Oracle Financial Services Trade-based Anti Money Laundering 8.0.8Fedoraproject Fedora 36Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0Oracle Application ExpressOracle Financial Services Analytical Applications Infrastructure 8.1.2.1Oracle Financial Services Behavior Detection PlatformOracle Financial Services Analytical Applications InfrastructureOracle Financial Services Behavior Detection Platform 8.0.8.0Oracle Financial Services Behavior Detection Platform 8.0.7.0Fedoraproject Fedora 37
7.5
CVSSv3
CVE-2022-24729
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop...
Ckeditor CkeditorDrupal DrupalOracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Commerce Merchandising 11.3.2Oracle Financial Services Trade-based Anti Money Laundering 8.0.7Oracle Financial Services Trade-based Anti Money Laundering 8.0.8Fedoraproject Fedora 36Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0Oracle Application ExpressOracle Financial Services Analytical Applications Infrastructure 8.1.2.1Oracle Financial Services Behavior Detection PlatformOracle Financial Services Analytical Applications InfrastructureOracle Financial Services Behavior Detection Platform 8.0.8.0Oracle Financial Services Behavior Detection Platform 8.0.7.0Fedoraproject Fedora 37
7.5
CVSSv3
CVE-2021-40690
All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath...
Apache Santuario Xml Security For JavaApache TomeeApache Cxf 3.4.4Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Oracle Flexcube Private Banking 12.1.0Oracle Agile Plm 9.3.6Oracle Weblogic Server 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Outside In Technology 8.5.5Oracle Weblogic Server 14.1.1.0.0Oracle Retail Merchandising System 16.0.3Oracle Retail Service Backbone 16.0.3Oracle Retail Financial Integration 16.0.3Oracle Retail Integration Bus 16.0.3Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Retail Service Backbone 15.0.3.1Oracle Retail Service Backbone 14.1.3.2Oracle Communications Messaging Server 8.1Oracle Retail Merchandising System 19.0.1Oracle Retail Integration Bus 14.1.3.2Oracle Retail Financial Integration 14.1.3.2Oracle Retail Integration Bus 15.0.3.1Oracle Retail Financial Integration 15.0.3.1Oracle Commerce Platform 11.3.2Oracle Retail Service Backbone 19.0.1Oracle Retail Integration Bus 19.0.1Oracle Retail Financial Integration 19.0.1Oracle Communications Diameter Intelligence HubOracle Retail Bulk Data Integration 16.0.3
7.5
CVSSv3
CVE-2020-13935
The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could...
Apache Tomcat 9.0.0Apache Tomcat 10.0.0Apache TomcatDebian Debian Linux 9.0Debian Debian Linux 10.0Netapp Oncommand System ManagerOpensuse Leap 15.1Opensuse Leap 15.2Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Mcafee Epolicy Orchestrator 5.9.0Mcafee Epolicy Orchestrator 5.9.1Mcafee Epolicy Orchestrator 5.10.0Oracle Managed File Transfer 12.2.1.3.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Workload Manager 18cOracle Workload Manager 19cOracle Workload Manager 12.2.0.1Oracle Agile Engineering Data Management 6.2.1.0Oracle Siebel Ui FrameworkOracle Mysql Enterprise MonitorOracle Managed File Transfer 12.2.1.4.0Oracle Commerce Guided Search 11.3.2Oracle Fmw Platform 12.2.1.4.0Oracle Fmw Platform 12.2.1.3.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Instant Messaging Server 10.0.1.5.0Oracle Blockchain Platform
7.5
CVSSv3
CVE-2020-36518
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects....
Fasterxml Jackson-databindOracle Weblogic Server 12.2.1.3.0Oracle Commerce Platform 11.3.1Oracle Utilities Framework 4.3.0.5.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Weblogic Server 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Sd-wan Edge 9.0Oracle Weblogic Server 14.1.1.0.0Oracle Coherence 14.1.1.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Global Lifecycle Management Nextgen Oui Framework 13.9.4.2.2Oracle Primavera Unifier 20.12Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera GatewayOracle Utilities Framework 4.4.0.3.0Oracle Sd-wan Edge 9.1Oracle Commerce Platform 11.3.0Oracle Commerce Platform 11.3.2Oracle Primavera Unifier 21.12Oracle Financial Services Trade-based Anti Money Laundering 8.0.7Oracle Financial Services Trade-based Anti Money Laundering 8.0.8Oracle Financial Services Behavior Detection Platform 8.0.8Oracle Big Data Spatial And GraphOracle Financial Services Enterprise Case Management 8.0.8.1Oracle Financial Services Enterprise Case Management 8.0.7.1Oracle Financial Services Enterprise Case Management 8.0.8.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0Oracle Financial Services Enterprise Case Management 8.0.7.2Oracle Communications Billing And Revenue ManagementOracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Network Repository Function 22.1.2Oracle Communications Cloud Native Core Unified Data Repository 22.2.0Oracle Utilities Framework 4.4.0.5.0Oracle Global Lifecycle Management Nextgen Oui FrameworkOracle Financial Services Analytical Applications Infrastructure 8.1.2.1Oracle Financial Services Enterprise Case ManagementOracle Retail Sales Audit 15.0.3.1Oracle Health Sciences Empirica Signal 9.1.0.5.2Oracle Spatial StudioOracle Primavera Unifier 18.0Oracle Financial Services Behavior Detection Platform 8.0.7.0.0Oracle Financial Services Behavior Detection PlatformOracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera UnifierOracle Financial Services Analytical Applications InfrastructureOracle Communications Cloud Native Core Service Communication Proxy 22.2.0Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.1Oracle Global Lifecycle Management OpatchOracle Graph Server And ClientDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snap Creator Framework -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -Netapp Cloud Insights Acquisition Unit -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
XSSCVE-2023-48314CVE-2023-6376CVE-2023-46384arbitrary codeCVE-2023-42917CVE-2023-48842CVE-2023-42916firewall
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook