Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle primavera unifier 19.12 vulnerabilities and exploits

(subscribe to this query)

5.5
CVSSv3
CVE-2022-30126
In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler,...
Apache TikaOracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Primavera Unifier 21.12
5.5
CVSSv3
CVE-2022-25169
The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files....
Apache TikaOracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Primavera Unifier 21.12
7.5
CVSSv3
CVE-2019-17558
Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configset could contain...
Apache SolrOracle Primavera Unifier 16.1Oracle Primavera Unifier 16.2Oracle Primavera UnifierOracle Primavera Unifier 18.8Oracle Primavera Unifier 19.12
9.8
CVSSv3
CVE-2020-25020
MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components....
Mpxj MpxjOracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12
5.3
CVSSv3
CVE-2020-35460
common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations....
Mpxj MpxjOracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Primavera Unifier 21.12
5.7
CVSSv3
CVE-2020-14617
Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Platform, Mobile App). Supported versions that are affected are 16.1, 16.2, 17.7-17.12, 18.8 and 19.12; Mobile App: Prior to 20.6. Easily exploitable vulnerability allows low...
Oracle Primavera Unifier 16.1Oracle Primavera Unifier 16.2Oracle Primavera UnifierOracle Primavera Unifier 18.8Oracle Primavera Unifier 19.12
9.8
CVSSv3
CVE-2021-42575
The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements....
Owasp Java Html SanitizerOracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Primavera Unifier 21.12Oracle Middleware Common Libraries And Tools 12.2.1.4.0Oracle Middleware Common Libraries And Tools 12.2.1.3.0
9.8
CVSSv3
CVE-2021-23450
All versions of package dojo are vulnerable to Prototype Pollution via the setObject function....
Linuxfoundation DojoOracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Weblogic Server 12.2.1.4.0Oracle Primavera Unifier 19.12Oracle Weblogic Server 14.1.1.0.0Oracle Primavera Unifier 20.12Oracle Primavera Unifier 21.12Oracle Communications Policy Management 12.6.0.0.0Debian Debian Linux 10.0
5.5
CVSSv3
CVE-2020-9489
A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser....
Apache Tika 1.24Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Flexcube Private Banking 12.0.0Oracle Primavera Unifier 16.1Oracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Messaging Server 8.1
5.5
CVSSv3
CVE-2021-28657
A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later....
Apache TikaOracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Healthcare Foundation 7.3.0Oracle Primavera Unifier 20.12Oracle Communications Messaging Server 8.1Oracle Healthcare Foundation 8.0.0Oracle Healthcare Foundation 8.1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
seacmsCVE-2023-28393remote code executionauthentication bypassopen redirectacymailingCVE-2023-43339CVE-2023-3664openstackpopup builderCVE-2023-21987CVE-2023-21991CVE-2023-3550
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook