Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle webcenter portal 12.2.1.4.0 vulnerabilities and exploits

(subscribe to this query)

6.8
CVSSv3
CVE-2020-14552
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...
Oracle Webcenter Portal 11.1.1.9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0
8.6
CVSSv3
CVE-2020-14611
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0
5.5
CVSSv3
CVE-2021-28657
A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later....
Apache TikaOracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Healthcare Foundation 7.3.0Oracle Primavera Unifier 20.12Oracle Communications Messaging Server 8.1Oracle Healthcare Foundation 8.0.0Oracle Healthcare Foundation 8.1.0
5.5
CVSSv3
CVE-2020-9489
A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser....
Apache Tika 1.24Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Flexcube Private Banking 12.0.0Oracle Primavera Unifier 16.1Oracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Messaging Server 8.1
9.8
CVSSv3
CVE-2020-2555
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with...
Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Retail Assortment Planning 15.0Oracle Utilities Framework 4.4.0.0.0Oracle Retail Assortment Planning 16.0Oracle Coherence 12.2.1.3.0Oracle Coherence 12.1.3.0.0Oracle Coherence 3.7.1.0Oracle Coherence 12.2.1.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Rapid Planning 12.1Oracle Rapid Planning 12.2Oracle Utilities FrameworkOracle Utilities Framework 4.4.0.2.0Oracle Communications Diameter Signaling RouterOracle Healthcare Data Repository 7.0.1Oracle Commerce PlatformOracle Commerce Platform 11.0.0Oracle Commerce Platform 11.1.0Oracle Commerce Platform 11.2.0
7.5
CVSSv3
CVE-2019-17359
The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64....
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.63Apache Tomee 7.0.7Apache Tomee 7.1.2Apache Tomee 8.0.1Netapp Oncommand Workflow Automation -Netapp Service Level Manager -Netapp Oncommand Api Services -Netapp Active Iq Unified ManagerOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Hospitality Guest Access 4.2.0Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 11.1.1.9.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Soa Suite 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Managed File Transfer 12.2.1.3.0Oracle Retail Xstore Point Of Service 18.0.1Oracle Weblogic Server 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Diameter Signaling RouterOracle Data Integrator 12.2.1.4.0Oracle Communications Session Route ManagerOracle Managed File Transfer 12.2.1.4.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Financial Services Analytical Applications InfrastructureOracle Peoplesoft Enterprise Hcm Global Payroll Switzerland 9.2Oracle Soa Suite 12.2.1.4.0Oracle Communications Convergence
6.1
CVSSv3
CVE-2020-9281
A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with the cke_protected syntax)....
Ckeditor CkeditorFedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Drupal DrupalOracle Peoplesoft Enterprise Peopletools 8.56Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 11.1.1.9.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Webcenter Portal 12.2.1.4.0Oracle Application ExpressOracle Jd Edwards Enterpriseone ToolsOracle Siebel Apps - Customer Order ManagementOracle Peoplesoft Enterprise Peopletools -Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Enterprise Default Management 2.10.0Oracle Banking Enterprise Default ManagmentOracle Banking Enterprise Default Management 2.7.0Oracle Banking Enterprise Default Management 2.7.1Oracle Banking Enterprise Default Management 2.6.2
9.8
CVSSv3
CVE-2019-10173
It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote attacker to run arbitrary shell commands when unmarshalling XML or any supported...
Xstream Project Xstream 1.4.10Oracle Banking Platform 2.4.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 11.1.1.9.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 2.2.0.0.0Oracle Endeca Information Discovery Studio 3.2.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Utilities FrameworkOracle Communications Diameter Signaling RouterOracle Communications Unified Inventory Management 7.3.0Oracle Banking PlatformOracle Communications Billing And Revenue Management Elastic Charging Engine 11.3.0.9.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Endeca Information Discovery Studio 3.2.0.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Webcenter Portal 12.2.1.4.0Oracle Business Activity Monitoring 12.2.1.4.0
7.5
CVSSv3
CVE-2020-11612
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder....
Netty NettyDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 33Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Oncommand Api Services -Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0Oracle Nosql DatabaseOracle Communications Messaging Server 8.1Oracle Communications Design Studio 7.4.2Oracle Communications Brm - Elastic Charging Engine 12.0.0.3Oracle Communications Cloud Native Core Service Communication Proxy 1.5.2Oracle Siebel Core - Server Framework
5.4
CVSSv3
CVE-2021-41164
CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing content sanitization,...
Ckeditor CkeditorDrupal DrupalOracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Banking Digital Experience 21.1Oracle Banking ApisOracle Banking Apis 19.1Oracle Banking Apis 19.2Oracle Banking Apis 20.1Oracle Banking Apis 21.1Oracle Banking Digital ExperienceOracle Webcenter Portal 12.2.1.3.0Oracle Agile Plm 9.3.6Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Webcenter Portal 12.2.1.4.0Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Application ExpressFedoraproject Fedora 36Fedoraproject Fedora 37
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
XSSCVE-2023-48314CVE-2023-6376CVE-2023-46384arbitrary codeCVE-2023-42917CVE-2023-48842CVE-2023-42916firewall
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook