Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle webcenter portal 12.2.1.4.0 vulnerabilities and exploits

(subscribe to this query)

6.8
CVSSv3
CVE-2020-14552
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...
Oracle Webcenter Portal 11.1.1.9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0
8.6
CVSSv3
CVE-2020-14611
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0
5.5
CVSSv3
CVE-2021-28657
A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later....
Apache TikaOracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Healthcare Foundation 7.3.0Oracle Primavera Unifier 20.12Oracle Communications Messaging Server 8.1Oracle Healthcare Foundation 8.0.0Oracle Healthcare Foundation 8.1.0
9.8
CVSSv3
CVE-2020-2555
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with...
Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Retail Assortment Planning 15.0Oracle Utilities Framework 4.4.0.0.0Oracle Retail Assortment Planning 16.0Oracle Coherence 12.2.1.3.0Oracle Coherence 12.1.3.0.0Oracle Coherence 3.7.1.0Oracle Coherence 12.2.1.4.0Oracle Communications Diameter Signaling RouterOracle Healthcare Data Repository 7.0.1Oracle Rapid Planning 12.1Oracle Rapid Planning 12.2Oracle Utilities FrameworkOracle Utilities Framework 4.4.0.2.0Oracle Webcenter Portal 12.2.1.4.0
5.5
CVSSv3
CVE-2020-9489
A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser....
Apache Tika 1.24Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.1Oracle Primavera Unifier 16.2Oracle Primavera UnifierOracle Primavera Unifier 18.8Oracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Messaging Server 8.1
6.1
CVSSv3
CVE-2020-9281
A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with the cke_protected syntax)....
Ckeditor CkeditorFedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Drupal DrupalOracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Application ExpressOracle Jd Edwards Enterpriseone ToolsOracle Peoplesoft Enterprise Peopletools -Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Siebel Apps - Customer Order ManagementOracle Webcenter Portal 11.1.1.9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0Oracle Banking Enterprise Default ManagmentOracle Banking Enterprise Default Managment 2.6.2Oracle Banking Enterprise Default Managment 2.7.0Oracle Banking Enterprise Default Managment 2.7.1Oracle Banking Enterprise Default Managment 2.10.0Oracle Banking Enterprise Default Managment 2.12.0
7.5
CVSSv3
CVE-2021-37714
jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop...
Jsoup JsoupQuarkus QuarkusOracle Webcenter Portal 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Flexcube Universal BankingOracle Peoplesoft Enterprise Peopletools 8.58Oracle Webcenter Portal 12.2.1.4.0Oracle Primavera Unifier 20.12Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Messaging Server 8.1Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera Unifier 21.12Oracle Banking Trade Finance 14.5Oracle Banking Treasury Management 14.5Oracle Flexcube Universal Banking 14.5Oracle Hospitality Token Proxy Service 19.2Oracle Retail Customer Management And Segmentation FoundationNetapp Management Services For Element Software And Netapp Hci -
7.5
CVSSv3
CVE-2020-11612
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder....
Netty NettyDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 33Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Oncommand Api Services -Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0Oracle Nosql DatabaseOracle Communications Messaging Server 8.1Oracle Communications Design Studio 7.4.2Oracle Communications Brm - Elastic Charging Engine 12.0.0.3Oracle Communications Cloud Native Core Service Communication Proxy 1.5.2Oracle Siebel Core - Server Framework
5.4
CVSSv3
CVE-2021-41164
CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing content sanitization,...
Ckeditor CkeditorDrupal DrupalOracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Banking Digital Experience 21.1Oracle Banking ApisOracle Banking Apis 19.1Oracle Banking Apis 19.2Oracle Banking Apis 20.1Oracle Banking Apis 21.1Oracle Banking Digital ExperienceOracle Webcenter Portal 12.2.1.3.0Oracle Agile Plm 9.3.6Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Webcenter Portal 12.2.1.4.0Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Application Express
9.8
CVSSv3
CVE-2021-21350
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to execute arbitrary code only by manipulating the processed input stream. No user is affected, who followed the...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Banking Enterprise Default Management 2.10.0Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Banking Platform 2.12.0Oracle Banking Virtual Account Management 14.2.0Oracle Banking Virtual Account Management 14.3.0Oracle Banking Virtual Account Management 14.5.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0Oracle Communications Policy Management 12.5.0Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Webcenter Portal 11.1.1.9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 12.2.1.3.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-2817CVE-2022-37400CVE-2022-37042unspecifiedCVE-2021-30873firmwareCVE-2022-37447firewallCVE-2020-23622
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook