oracle communications unified inventory management 7.5.0 vulnerabilities and exploits

(subscribe to this query)

Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.6.1, Traefik skips the router transport layer security (TLS) configuration when the host header is a fully qualified domain name (FQDN). For a request, the TLS configuration choice can be different than the ro...

Traefik Traefik Oracle Communications Unified Inventory Management 7.5.0

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant before 1.9.16 and 1.10.11 were aff...

It was found that xstream API version 1.4.10 prior to 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote malicious user to run arbitrary shell commands when unmarshalling XML or any support...

Xstream Project Xstream 1.4.10 Oracle Banking Platform 2.4.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Webcenter Portal 11.1.1.9.0 Oracle Utilities Framework 4.2.0.3.0 Oracle Utilities Framework 4.2.0.2.0 Oracle Utilities Framework 2.2.0.0.0 Oracle Endeca Information Discovery Studio 3.2.0 Oracle Utilities Framework 4.4.0.0.0 Oracle Communications Unified Inventory Management 7.4.0 Oracle Webcenter Portal 12.2.1.4.0 Oracle Retail Xstore Point Of Service 17.0 Oracle Utilities Framework Oracle Communications Diameter Signaling Router Oracle Communications Unified Inventory Management 7.3.0 Oracle Banking Platform 2.7.1 Oracle Banking Platform 2.9.0 Oracle Banking Platform Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3.0.9.0 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0 Oracle Business Activity Monitoring 12.2.1.3.0 Oracle Business Activity Monitoring 11.1.1.9.0

2 Github repositories

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats ...

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip pack...

In Spring Framework, versions 5.2.x before 5.2.15 and versions 5.3.x before 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been upload...

Vmware Spring Framework Oracle Retail Order Broker 16.0 Oracle Retail Predictive Application Server 15.0.3 Oracle Enterprise Data Quality 12.2.1.3.0 Oracle Retail Assortment Planning 16.0 Oracle Retail Financial Integration 16.0.3 Oracle Communications Network Integrity 7.3.6 Oracle Retail Integration Bus 16.0.3 Oracle Insurance Rules Palette 11.0.2 Oracle Insurance Rules Palette 11.1.0 Oracle Communications Interactive Session Recorder 6.4 Oracle Commerce Guided Search 11.3.2 Oracle Communications Unified Inventory Management 7.4.1 Oracle Retail Customer Management And Segmentation Foundation Oracle Enterprise Data Quality 12.2.1.4.0 Oracle Communications Element Manager Oracle Insurance Policy Administration Oracle Healthcare Data Repository 8.1.0 Oracle Documaker Oracle Mysql Enterprise Monitor Oracle Communications Session Report Manager Oracle Communications Brm - Elastic Charging Engine 12.0.0.3

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....

Vmware Spring Framework Cisco Cx Cloud Agent Oracle Sd-wan Edge 9.0 Oracle Retail Xstore Point Of Service 20.0.1 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.1 Oracle Sd-wan Edge 9.1 Siemens Siveillance Identity 1.6 Siemens Siveillance Identity 1.5 Siemens Sipass Integrated 2.85 Siemens Sipass Integrated 2.80 Oracle Product Lifecycle Analytics 3.6.1 Oracle Financial Services Enterprise Case Management 8.1.1.0 Oracle Financial Services Enterprise Case Management 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.2.0 Oracle Financial Services Behavior Detection Platform 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.1.0 Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Cloud Native Core Unified Data Repository 1.15.0 Oracle Communications Cloud Native Core Unified Data Repository 22.1.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0

180 Github repositories7 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook