Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications analytics 12.1.1 vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv3
CVE-2020-11023
In jQuery versions greater than or equal to 1.0.3 and prior to 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted c...
Jquery JqueryDebian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Drupal DrupalOracle Weblogic Server 12.1.3.0.0Oracle Hyperion Financial Reporting 11.1.2.4Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Communications Operations Monitor 3.4Oracle Weblogic Server 12.2.1.4.0Oracle Webcenter Sites 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Communications Interactive Session RecorderOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Application ExpressOracle Rest Data Services 12.2.0.1Oracle Rest Data Services 12.1.0.2
7.5
CVSSv3
CVE-2018-11054
RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to potentially cause a Denial Of Service.
Dell Bsafe 4.1.6Oracle Application Testing Suite 13.3.0.1Oracle Communications Analytics 12.1.1Oracle Communications Ip Service Activator 7.3.4Oracle Communications Ip Service Activator 7.4.0Oracle Core Rdbms 11.2.0.4Oracle Core Rdbms 12.1.0.2Oracle Core Rdbms 12.2.0.1Oracle Core Rdbms 18cOracle Core Rdbms 19cOracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Goldengate Application Adapters 12.3.2.1.0Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Real User Experience Insight 13.1.2.1Oracle Real User Experience Insight 13.2.3.1Oracle Real User Experience Insight 13.3.1.0Oracle Retail Predictive Application Server 15.0.3Oracle Retail Predictive Application Server 16.0.3Oracle Security Service 11.1.1.9.0Oracle Security Service 12.1.3.0.0Oracle Security Service 12.2.1.2.0
5.5
CVSSv3
CVE-2018-11055
RSA BSAFE Micro Edition Suite, versions before 4.0.11 (in 4.0.x) and before 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release ('Heap Inspection') vulnerability. Decoded PKCS #12 data in heap memory is not zeroized by MES before releasing th...
Dell BsafeOracle Application Testing Suite 13.3.0.1Oracle Communications Analytics 12.1.1Oracle Communications Ip Service Activator 7.3.0Oracle Communications Ip Service Activator 7.4.0Oracle Core Rdbms 11.2.0.4Oracle Core Rdbms 12.1.0.2Oracle Core Rdbms 12.2.0.1Oracle Core Rdbms 18cOracle Core Rdbms 19cOracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Goldengate Application Adapters 12.3.2.1.0Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Real User Experience Insight 13.1.2.1Oracle Real User Experience Insight 13.2.3.1Oracle Real User Experience Insight 13.3.1.0Oracle Retail Predictive Application Server 15.0.3Oracle Retail Predictive Application Server 16.0.3.0Oracle Security Service 11.1.1.9.0Oracle Security Service 12.1.3.0.0Oracle Security Service 12.2.1.3.0
6.5
CVSSv3
CVE-2018-11056
RSA BSAFE Micro Edition Suite, before 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions before 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption ('Resource Exhaustion') vulnerability when parsing ASN.1 data. A remote attacker could use mali...
Dell Bsafe Crypto-cDell BsafeOracle Application Testing Suite 13.3.0.1Oracle Communications Analytics 12.1.1Oracle Communications Ip Service Activator 7.3.0Oracle Communications Ip Service Activator 7.4.0Oracle Core Rdbms 11.2.0.4Oracle Core Rdbms 12.1.0.2Oracle Core Rdbms 12.2.0.1Oracle Core Rdbms 18cOracle Core Rdbms 19cOracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Goldengate Application Adapters 12.3.2.1.0Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Real User Experience Insight 13.1.2.1Oracle Real User Experience Insight 13.2.3.1Oracle Real User Experience Insight 13.3.1.0Oracle Retail Predictive Application Server 15.0.3Oracle Retail Predictive Application Server 16.0.3.0Oracle Security Service 11.1.1.9.0Oracle Security Service 12.1.3.0.0
5.9
CVSSv3
CVE-2018-11057
RSA BSAFE Micro Edition Suite, versions before 4.0.11 (in 4.0.x) and before 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decryption. A remote attacker may be able to recover a RSA key.
Dell BsafeOracle Application Testing Suite 13.3.0.1Oracle Communications Analytics 12.1.1Oracle Communications Ip Service Activator 7.3.0Oracle Communications Ip Service Activator 7.4.0Oracle Core Rdbms 11.2.0.4Oracle Core Rdbms 12.1.0.2Oracle Core Rdbms 12.2.0.1Oracle Core Rdbms 18cOracle Core Rdbms 19cOracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Goldengate Application Adapters 12.3.2.1.0Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Real User Experience Insight 13.1.2.1Oracle Real User Experience Insight 13.2.3.1Oracle Real User Experience Insight 13.3.1.0Oracle Retail Predictive Application Server 15.0.3Oracle Retail Predictive Application Server 16.0.3.0Oracle Security Service 11.1.1.9.0Oracle Security Service 12.1.3.0.0Oracle Security Service 12.2.1.3.0
9.8
CVSSv3
CVE-2018-11058
RSA BSAFE Micro Edition Suite, versions before 4.0.11 (in 4.0.x) and before 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version before 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously construc...
Dell BsafeDell Bsafe Crypto-cOracle Application Testing Suite 13.3.0.1Oracle Communications Analytics 12.1.1Oracle Communications Ip Service Activator 7.3.0Oracle Communications Ip Service Activator 7.4.0Oracle Core Rdbms 11.2.0.4Oracle Core Rdbms 12.1.0.2Oracle Core Rdbms 12.2.0.1Oracle Core Rdbms 18cOracle Core Rdbms 19cOracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Goldengate Application Adapters 12.3.2.1.0Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Real User Experience Insight 13.1.2.1Oracle Real User Experience Insight 13.2.3.1Oracle Real User Experience Insight 13.3.1.0Oracle Retail Predictive Application Server 15.0.3Oracle Retail Predictive Application Server 16.0.3.0Oracle Security Service 11.1.1.9.0Oracle Security Service 12.1.3.0.0
7.5
CVSSv3
CVE-2018-15769
RSA BSAFE Micro Edition Suite versions before 4.0.11 (in 4.0.x series) and versions before 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very larg...
Dell BsafeOracle Application Testing Suite 13.3.0.1Oracle Communications Analytics 12.1.1Oracle Communications Ip Service Activator 7.3.0Oracle Communications Ip Service Activator 7.4.0Oracle Core Rdbms 11.2.0.4Oracle Core Rdbms 12.1.0.2Oracle Core Rdbms 12.2.0.1Oracle Core Rdbms 18cOracle Core Rdbms 19cOracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Goldengate Application Adapters 12.3.2.1.0Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Real User Experience Insight 13.1.2.1Oracle Real User Experience Insight 13.2.3.1Oracle Real User Experience Insight 13.3.1.0Oracle Retail Predictive Application Server 15.0.3Oracle Retail Predictive Application Server 16.0.3.0Oracle Security Service 11.1.1.9.0Oracle Security Service 12.1.3.0.0Oracle Security Service 12.2.1.3.0
5.3
CVSSv3
CVE-2019-10246
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information revea...
Eclipse Jetty 9.2.27Eclipse Jetty 9.3.26Eclipse Jetty 9.4.16Netapp Snap Creator Framework -Netapp Snapcenter -Netapp Oncommand System ManagerNetapp Snapmanager -Netapp Storage Services Connector -Netapp Virtual Storage ConsoleNetapp Virtual Storage Console 9.6Netapp Storage Replication Adapter For Clustered Data OntapNetapp Storage Replication Adapter For Clustered Data Ontap 9.6Netapp Vasa Provider For Clustered Data OntapNetapp Vasa Provider For Clustered Data Ontap -Netapp Element -Oracle Retail Xstore Point Of Service 15.0Oracle Flexcube Private Banking 12.1.0Oracle Retail Xstore Point Of Service 7.1Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Core Banking 5.2.0Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1
6.1
CVSSv3
CVE-2019-11358
jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Jquery JqueryDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Drupal DrupalBackdropcms BackdropFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0Netapp Snapcenter -Netapp Oncommand System ManagerRedhat Cloudforms 4.7Redhat Virtualization Manager 4.3Oracle Service Bus 12.1.3.0.0Oracle Primavera Unifier 16.2Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Weblogic Server 12.1.3.0.0Oracle Service Bus 11.1.1.9.0Oracle Jdeveloper 11.1.1.9.0Oracle Primavera Unifier 16.1
9.8
CVSSv3
CVE-2022-22965
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring FrameworkCisco Cx Cloud AgentOracle Sd-wan Edge 9.0Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Sd-wan Edge 9.1Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Oracle Product Lifecycle Analytics 3.6.1Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 22.1.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040privilege escalationCVE-2024-4112CVE-2024-32872man-in-the-middleCVE-2024-32788bypassCVE-2024-3400CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook