oracle flexcube private banking 12.0.0 vulnerabilities and exploits

(subscribe to this query)

Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0.

Apache Camel Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Enterprise Manager Base Platform 13.3.0.0 Oracle Enterprise Manager Base Platform 13.4.0.0 Oracle Communications Diameter Signaling Router Oracle Communications Diameter Intelligence Hub

A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack: https://docs.oracle.com/javase/8/doc...

Apache Activemq 5.15.12 Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Enterprise Repository 11.1.1.7.0 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager Oracle Communications Session Route Manager Oracle Communications Session Report Manager

1 Github repository

The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users ...

Apache Activemq Apache Activemq Artemis Netapp Oncommand Workflow Automation -Debian Debian Linux 9.0 Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Communications Session Report Manager Oracle Communications Element Manager Oracle Communications Session Route Manager

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.

Apache Tika Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Debian Debian Linux 8.0 Oracle Business Process Management Suite 12.2.1.3.0 Canonical Ubuntu Linux 16.04 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Communications Messaging Server 8.1 Oracle Communications Messaging Server 8.0.2

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.

Apache Tika Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Debian Debian Linux 8.0 Oracle Business Process Management Suite 12.2.1.3.0 Canonical Ubuntu Linux 16.04 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Communications Messaging Server 8.1 Oracle Communications Messaging Server 8.0.2

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache...

Apache Tika 1.24 Oracle Flexcube Private Banking 12.1.0 Oracle Primavera Unifier 16.2 Oracle Flexcube Private Banking 12.0.0 Oracle Primavera Unifier 16.1 Oracle Webcenter Portal 12.2.1.3.0 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Primavera Unifier 19.12 Oracle Webcenter Portal 12.2.1.4.0 Oracle Communications Messaging Server 8.1

Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore (JKS/PKCS12)...

Apache Cxf Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Retail Order Broker 15.0 Oracle Communications Diameter Signaling Router Oracle Communications Session Route Manager 8.1.1 Oracle Communications Session Route Manager 8.2.0 Oracle Communications Session Route Manager 8.2.1 Oracle Communications Session Report Manager Oracle Communications Element Manager Oracle Commerce Guided Search 11.3.2

Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default options, all unregistered classes are resolved on demand. This leads to the "deserialization gadgets" exploit when provide...

Vmware Spring Integration Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Retail Merchandising System 16.0.3 Oracle Banking Virtual Account Management 14.3.0 Oracle Banking Credit Facilities Process Management 14.3.0 Oracle Banking Corporate Lending Process Management 14.3.0 Oracle Retail Customer Management And Segmentation Foundation Oracle Banking Virtual Account Management 14.2.0 Oracle Banking Virtual Account Management 14.5.0 Oracle Banking Supply Chain Finance 14.2.0 Oracle Banking Corporate Lending Process Management 14.2.0 Oracle Banking Corporate Lending Process Management 14.5.0 Oracle Banking Credit Facilities Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.5.0 Oracle Banking Supply Chain Finance 14.3.0 Oracle Banking Supply Chain Finance 14.5.0

In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.

Apache Activemq Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Enterprise Repository 11.1.1.7.0 Oracle Communications Element Manager 8.2.0 Oracle Communications Element Manager 8.2.1 Oracle Communications Element Manager 8.1.1 Oracle Communications Diameter Signaling Router Oracle Communications Session Report Manager 8.1.1 Oracle Communications Session Report Manager 8.2.0 Oracle Communications Session Report Manager 8.2.1 Oracle Communications Session Route Manager 8.1.1 Oracle Communications Session Route Manager 8.2.0 Oracle Communications Session Route Manager 8.2.1

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web page. Please note that...

Apache Cxf Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Retail Order Broker 15.0 Oracle Communications Element Manager 8.2.0 Oracle Communications Element Manager 8.2.1 Oracle Communications Element Manager 8.1.1 Oracle Communications Session Report Manager 8.1.1 Oracle Communications Session Report Manager 8.2.0 Oracle Communications Session Report Manager 8.2.1 Oracle Communications Session Route Manager 8.1.1 Oracle Communications Session Route Manager 8.2.0 Oracle Communications Session Route Manager 8.2.1 Oracle Commerce Guided Search 11.3.2

« PREV 1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook