Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle commerce guided search 11.3.2 vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv3
CVE-2023-22029
Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Workbench). The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guid...
Oracle Commerce Guided Search 11.3.2
7.5
CVSSv3
CVE-2022-21466
Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Co...
Oracle Commerce Guided Search 11.3.2
6.5
CVSSv3
CVE-2019-12406
Apache CXF prior to 3.3.4 and 3.2.11 does not restrict the number of message attachments present in a given message. This leaves open the possibility of a denial of service type attack, where a malicious user crafts a message containing a very large number of message attachments....
Apache CxfOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Retail Order Broker 15.0Oracle Commerce Guided Search 11.3.2
9.8
CVSSv3
CVE-2019-12419
Apache CXF prior to 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token services, where it does not validate that the authenticated principal is equal to that of the suppli...
Apache CxfOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Retail Order Broker 15.0Oracle Enterprise Manager Base Platform 13.2.1.0Oracle Commerce Guided Search 11.3.2
5.4
CVSSv3
CVE-2021-32809
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Clipboard](https://ckeditor.com/cke4/addon/clipboard) package. The vulnerability allowed to abuse paste functionality using malformed HTML, which...
Ckeditor CkeditorFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Commerce Merchandising 11.3.2Oracle Jd Edwards Enterpriseone ToolsOracle Documaker 12.6.3Oracle Documaker 12.6.4Oracle Banking Party Management 2.7.0Oracle Financial Services Analytical Applications InfrastructureOracle Application Express
7.2
CVSSv3
CVE-2020-7712
This affects the package json prior to 10.0.0. It is possible to inject arbritary commands using the parseLookup function.
Joyent JsonOracle Commerce Guided Search 11.3.2Oracle Timesten In-memory DatabaseOracle Financial Services Regulatory Reporting With Agilereporter 8.0.9.6.3Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0
8.1
CVSSv3
CVE-2021-20190
A flaw was found in jackson-databind prior to 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Fasterxml Jackson-databindNetapp Oncommand Insight -Netapp Service Level Manager -Netapp Oncommand Api Services -Netapp Active Iq Unified Manager -Apache NifiDebian Debian Linux 9.0Oracle Commerce Guided Search And Experience Manager 11.3.2
5.4
CVSSv3
CVE-2021-37695
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed Fake Objects HTML, which could ...
Ckeditor CkeditorDebian Debian Linux 9.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Financial Services Analytical Applications Infrastructure 8.0.3Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Commerce Merchandising 11.3.2Oracle Jd Edwards Enterpriseone ToolsOracle Documaker 12.6.3Oracle Documaker 12.6.4Oracle Financial Services Model Management And GovernanceOracle Banking Party Management 2.7.0Oracle Financial Services Analytical Applications InfrastructureOracle Application Express
7.5
CVSSv3
CVE-2019-12423
Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore (JKS/PKCS12)...
Apache CxfOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Retail Order Broker 15.0Oracle Communications Diameter Signaling RouterOracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Communications Session Report ManagerOracle Communications Element ManagerOracle Commerce Guided Search 11.3.2
5.5
CVSSv3
CVE-2022-22946
In spring cloud gateway versions before 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trusted certificates are set will be configured to use an insecure TrustManager. This makes the gateway able to connect to remote services with invalid or custom ...
Vmware Spring Cloud Gateway 3.1.0Oracle Commerce Guided Search 11.3.2Oracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1Oracle Communications Cloud Native Core Console 22.2.0Oracle Communications Cloud Native Core Network Repository Function 22.1.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38298CVE-2024-20356CVE-2023-21987CVE-2024-33217bypassCVE-2024-31804CVE-2024-32660unauthorizedSSRF
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook