Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle utilities framework 4.4.0.0.0 vulnerabilities and exploits

(subscribe to this query)
5.4
CVSSv3
CVE-2020-14895
Vulnerability in the Oracle Utilities Framework product of Oracle Utilities Applications (component: System Wide). Supported versions that are affected are 2.2.0.0.0, 4.2.0.2.0, 4.2.0.3.0, 4.3.0.1.0 - 4.3.0.6.0, 4.4.0.0.0 and 4.4.0.2.0. Easily exploitable vulnerability allows low...
Oracle Utilities Framework 2.2.0.0.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities FrameworkOracle Utilities Framework 4.4.0.0.0Oracle Utilities Framework 4.4.0.2.0
9.8
CVSSv3
CVE-2020-14756
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo...
Oracle Coherence 3.7.1.0Oracle Coherence 12.1.3.0.0Oracle Coherence 12.2.1.3.0Oracle Coherence 12.2.1.4.0Oracle Coherence 14.1.1.0.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities FrameworkOracle Utilities Framework 4.4.0.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Utilities Framework 4.4.0.3.0
7.5
CVSSv3
CVE-2021-31684
A vulnerability exists in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.
Json-smart Project Json-smart-v1Json-smart Project Json-smart-v2Oracle Utilities Framework 4.4.0.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Utilities Framework 4.4.0.3.0
9.8
CVSSv3
CVE-2020-2555
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with net...
Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Retail Assortment Planning 15.0Oracle Utilities Framework 4.4.0.0.0Oracle Retail Assortment Planning 16.0Oracle Coherence 12.2.1.3.0Oracle Coherence 12.1.3.0.0Oracle Coherence 3.7.1.0Oracle Coherence 12.2.1.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Rapid Planning 12.1Oracle Rapid Planning 12.2Oracle Utilities FrameworkOracle Utilities Framework 4.4.0.2.0Oracle Communications Diameter Signaling RouterOracle Healthcare Data Repository 7.0.1Oracle Commerce PlatformOracle Commerce Platform 11.0.0Oracle Commerce Platform 11.1.0Oracle Commerce Platform 11.2.0
5.9
CVSSv3
CVE-2021-27568
An issue exists in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 up to and including 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash o...
Json-smart Project Json-smart-v1Json-smart Project Json-smart-v2Oracle Weblogic Server 12.2.1.3.0Oracle Utilities Framework 4.4.0.0.0Oracle Weblogic Server 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Weblogic Server 14.1.1.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Utilities Framework 4.4.0.3.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Oss Support Tools
7.5
CVSSv3
CVE-2018-1000632
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specify...
Dom4j Project Dom4jDebian Debian Linux 8.0Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Flexcube Investor Servicing 12.0.4Oracle Retail Integration Bus 15.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Flexcube Investor Servicing 12.4.0Oracle Flexcube Investor Servicing 14.0.0Oracle Retail Integration Bus 16.0Oracle Utilities Framework 4.4.0.0.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Rapid Planning 12.1Oracle Rapid Planning 12.2Oracle Utilities Framework 4.4.0.2Oracle Utilities Framework 2.2.0Oracle Utilities FrameworkRedhat Satellite Capsule 6.6Redhat Satellite 6.6Redhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Enterprise Application Platform 6.4.0
9.8
CVSSv3
CVE-2019-17495
A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI prior to 3.23.11 allows malicious users to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this pr...
Smartbear Swagger UiOracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Banking Digital Experience 19.1Oracle Utilities Framework 4.4.0.2.0Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Primavera GatewayOracle Banking PlatformOracle Banking Digital Experience 21.1Oracle Banking ApisOracle Banking Apis 19.1Oracle Banking Apis 19.2Oracle Banking Apis 20.1Oracle Banking Apis 21.1Oracle Banking Digital Experience
8.5
CVSSv3
CVE-2021-39153
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream, if using the version out of the...
Xstream Project XstreamFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Unified Inventory Management 7.4.1
9.8
CVSSv3
CVE-2019-10173
It was found that xstream API version 1.4.10 prior to 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote malicious user to run arbitrary shell commands when unmarshalling XML or any support...
Xstream Project Xstream 1.4.10Oracle Banking Platform 2.4.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 11.1.1.9.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 2.2.0.0.0Oracle Endeca Information Discovery Studio 3.2.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Utilities FrameworkOracle Communications Diameter Signaling RouterOracle Communications Unified Inventory Management 7.3.0Oracle Banking PlatformOracle Communications Billing And Revenue Management Elastic Charging Engine 11.3.0.9.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Endeca Information Discovery Studio 3.2.0.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0
8.5
CVSSv3
CVE-2021-39145
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who follow...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Commerce Guided Search 11.3.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook