oracle sd-wan edge 9.0 vulnerabilities and exploits

(subscribe to this query)

10

CVSSv3

Vulnerability in the Oracle SD-WAN Edge product of Oracle Communications Applications (component: User Interface). Supported versions that are affected are 8.2 and 9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Oracle Sd-wan Edge 8.2 Oracle Sd-wan Edge 9.03 Articles available

7.5

CVSSv3

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls....

Perl Perl Netapp Snap Creator Framework -Netapp Oncommand Workflow Automation -Fedoraproject Fedora 31 Opensuse Leap 15.1 Oracle Communications Eagle Lnp Application Processor 10.1 Oracle Communications Eagle Lnp Application Processor 10.2 Oracle Sd-wan Edge 9.0 Oracle Sd-wan Edge 8.2 Oracle Enterprise Manager Base Platform 13.4.0.0 Oracle Communications Billing And Revenue Management 12.0.0.3.0 Oracle Communications Offline Mediation Controller 12.0.0.3.0 Oracle Communications Billing And Revenue Management 12.0.0.2.0 Oracle Communications Diameter Signaling Router Oracle Tekelec Platform Distribution Oracle Communications Lsms Oracle Configuration Manager 12.1.2.0.8 Oracle Sd-wan Edge 9.1 Oracle Communications Eagle Application Processor Oracle Communications Performance Intelligence Center3 Github repositories available

8.2

CVSSv3

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow....

Perl Perl Fedoraproject Fedora 31 Opensuse Leap 15.1 Oracle Communications Eagle Lnp Application Processor 10.1 Oracle Communications Eagle Lnp Application Processor 10.2 Oracle Sd-wan Edge 9.0 Oracle Sd-wan Edge 8.2 Oracle Enterprise Manager Base Platform 13.4.0.0 Oracle Communications Billing And Revenue Management 12.0.0.3.0 Oracle Communications Offline Mediation Controller 12.0.0.3.0 Oracle Communications Billing And Revenue Management 12.0.0.2.0 Oracle Communications Diameter Signaling Router Oracle Communications Pricing Design Center 12.0.0.3.0 Oracle Tekelec Platform Distribution Oracle Communications Eagle Lnp Application Processor 46.7 Oracle Communications Eagle Lnp Application Processor 46.8 Oracle Communications Eagle Lnp Application Processor 46.9 Oracle Communications Lsms Oracle Configuration Manager 12.1.2.0.8 Oracle Sd-wan Edge 9.1 Oracle Communications Eagle Application Processor Oracle Communications Performance Intelligence Center7 Github repositories available

8.8

CVSSv3

An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein write...

Linux Linux Kernel Linux Linux Kernel 5.4 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux For Real Time 7 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Redhat Virtualization Host 4.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Server Aus 7.7 Redhat Enterprise Linux Server Tus 7.7 Redhat Enterprise Linux Eus 7.7 Redhat Enterprise Linux For Real Time 8 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Opensuse Leap 15.0 Opensuse Leap 15.1 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Aff A700s Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Netapp H610s Firmware -Netapp Data Availability Services -Netapp Solidfire -Netapp Hci Management Node -Oracle Sd-wan Edge 8.2 Oracle Sd-wan Edge 7.3 Oracle Sd-wan Edge 8.0 Oracle Sd-wan Edge 8.11 Github repository available

5.3

CVSSv3

Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly...

Apache Tomcat Apache Tomee 8.0.6 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Oracle Managed File Transfer 12.2.1.3.0 Oracle Instantis Enterprisetrack 17.1 Oracle Instantis Enterprisetrack 17.2 Oracle Instantis Enterprisetrack 17.3 Oracle Agile Plm 9.3.6 Oracle Communications Policy Management 12.5.0 Oracle Sd-wan Edge 9.0 Oracle Managed File Transfer 12.2.1.4.0 Oracle Secure Global Desktop 5.6 Oracle Hospitality Cruise Shipboard Property Management System 20.1.0 Oracle Communications Pricing Design Center 12.0.0.3.0 Oracle Communications Session Route Manager Oracle Mysql Enterprise Monitor Oracle Communications Session Report Manager Oracle Sd-wan Edge 9.1 Oracle Utilities Testing Accelerator 6.0.0.2.2 Oracle Utilities Testing Accelerator 6.0.0.3.1 Oracle Utilities Testing Accelerator 6.0.0.1.1 Oracle Communications Diameter Signaling Router Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0 Oracle Communications Instant Messaging Server 10.0.1.5.0 Oracle Graph Server And Client Oracle Healthcare Translational Research 4.1.0 Mcafee Epolicy Orchestrator 5.10.0 Mcafee Epolicy Orchestrator1 Github repository available

7.5

CVSSv3

The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the...

Apache Tomcat 10.0.0 Apache Tomcat 10.1.0 Apache Tomcat Netapp Hci -Netapp Management Services For Element Software -Debian Debian Linux 11.0 Oracle Managed File Transfer 12.2.1.3.0 Oracle Sd-wan Edge 9.0 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Managed File Transfer 12.2.1.4.0 Oracle Hospitality Cruise Shipboard Property Management System 20.1.0 Oracle Sd-wan Edge 9.1 Oracle Communications Diameter Signaling Router Oracle Big Data Spatial And Graph Oracle Middleware Common Libraries And Tools 12.2.1.4.0 Oracle Retail Customer Insights 15.0.2 Oracle Retail Customer Insights 16.0.2 Oracle Taleo Platform Oracle Payment Interface 20.3 Oracle Payment Interface 19.1 Oracle Retail Eftlink 21.0.0 Oracle Retail Data Extractor For Merchandising 16.0.2 Oracle Retail Data Extractor For Merchandising 15.0.2 Oracle Retail Financial Integration 19.0.0 Oracle Retail Financial Integration 16.0.1 Oracle Retail Store Inventory Management 14.1.3.5 Oracle Retail Store Inventory Management 14.1.3.14 Oracle Retail Store Inventory Management 15.0.3.3 Oracle Retail Store Inventory Management 15.0.3.8 Oracle Retail Store Inventory Management 16.0.3.7 Oracle Retail Store Inventory Management 14.0.4.132 Github repositories available

7.5

CVSSv3

While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent...

9.8

CVSSv3

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources....

Vmware Spring Cloud Function Oracle Sd-wan Edge 9.0 Oracle Retail Xstore Point Of Service 20.0.1 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0 Oracle Banking Cash Management 14.5 Oracle Banking Trade Finance Process Management 14.5 Oracle Banking Credit Facilities Process Management 14.5 Oracle Banking Corporate Lending Process Management 14.5 Oracle Banking Supply Chain Finance 14.5 Oracle Sd-wan Edge 9.1 Oracle Banking Liquidity Management 14.5 Oracle Banking Liquidity Management 14.2 Oracle Banking Virtual Account Management 14.5 Oracle Financial Services Enterprise Case Management 8.1.1.0 Oracle Financial Services Enterprise Case Management 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.2.0 Oracle Financial Services Behavior Detection Platform 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.1.0 Oracle Mysql Enterprise Monitor Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Communications Policy Management 12.6.0.0.0 Oracle Communications Cloud Native Core Unified Data Repository 1.15.0 Oracle Communications Cloud Native Core Unified Data Repository 22.1.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0 Oracle Communications Cloud Native Core Policy 22.1.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 22.1.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Exposure Function 22.1.0 Oracle Communications Cloud Native Core Console 22.1.0 Oracle Communications Cloud Native Core Automated Test Suite 22.1.0 Oracle Communications Cloud Native Core Automated Test Suite 1.9.0 Oracle Product Lifecycle Analytics 3.6.1.0 Oracle Retail Xstore Point Of Service 21.0.0 Oracle Financial Services Enterprise Case Management 8.1.2.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0 Oracle Banking Origination 14.5 Oracle Banking Electronic Data Exchange For Corporates 14.5 Oracle Banking Branch 14.5 Oracle Communications Cloud Native Core Policy 22.1.3 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.286 Github repositories available4 Articles available

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook