Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle hyperion infrastructure technology 11.1.2.4 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2020-11655
SQLite up to and including 3.31.1 allows malicious users to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
Sqlite SqliteNetapp Ontap Select Deploy Administration Utility -Debian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 20.04Oracle Communications Element ManagerOracle Communications Network Charging And Control 6.0.1Oracle Communications Network Charging And ControlOracle Communications Network Charging And Control 12.0.2Oracle Communications Session Report ManagerOracle Communications Session Route ManagerOracle Enterprise Manager Ops Center 12.4.0.0Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle MysqlOracle Mysql WorkbenchOracle Outside In Technology 8.5.4
7.5
CVSSv3
CVE-2020-11993
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "in...
Apache Http ServerNetapp Clustered Data Ontap -Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Opensuse Leap 15.1Opensuse Leap 15.2Debian Debian Linux 10.0Fedoraproject Fedora 31Fedoraproject Fedora 32Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Route ManagerOracle Communications Session Report ManagerOracle Communications Element ManagerOracle Zfs Storage Appliance Kit 8.8
9.8
CVSSv3
CVE-2020-11984
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
Apache Http ServerNetapp Clustered Data Ontap -Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 31Fedoraproject Fedora 32Opensuse Leap 15.1Opensuse Leap 15.2Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Route ManagerOracle Communications Session Report ManagerOracle Communications Element ManagerOracle Zfs Storage Appliance Kit 8.8
5.5
CVSSv3
CVE-2021-27807
A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
Apache PdfboxFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Hyperion Financial Reporting 11.1.2.4Oracle Webcenter Sites 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Flexcube Universal BankingOracle Outside In Technology 8.5.5Oracle Primavera Unifier 19.12Oracle Webcenter Sites 12.2.1.4.0Oracle Retail Customer Management And Segmentation Foundation 19.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0Oracle Banking Trade Finance Process Management 14.3.0Oracle Communications Messaging Server 8.1Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Retail Xstore Point Of Service 20.0.1
7.5
CVSSv3
CVE-2019-5427
c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.
Mchange C3p0Fedoraproject Fedora 29Fedoraproject Fedora 30Oracle Retail Xstore Point Of Service 15.0Oracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Webcenter Sites 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Webcenter Sites 12.2.1.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Communications Ip Service Activator 7.4.0Oracle Communications Ip Service Activator 7.3.0Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Route ManagerOracle Enterprise Manager Base Platform 13.2.1.0Oracle Documaker
5.5
CVSSv3
CVE-2021-27906
A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
Apache PdfboxFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Hyperion Financial Reporting 11.1.2.4Oracle Webcenter Sites 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Flexcube Universal BankingOracle Peoplesoft Enterprise Peopletools 8.58Oracle Outside In Technology 8.5.5Oracle Primavera Unifier 19.12Oracle Webcenter Sites 12.2.1.4.0Oracle Retail Customer Management And Segmentation Foundation 19.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0Oracle Banking Trade Finance Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Communications Messaging Server 8.1Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Retail Xstore Point Of Service 16.0.6
4.8
CVSSv3
CVE-2020-1935
In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located be...
Apache Tomcat 9.0.0Apache TomcatDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Netapp Oncommand System ManagerNetapp Data Availability Services -Oracle Transportation Management 6.3.7Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Retail Order Broker 15.0Oracle Agile Product Lifecycle Management 9.3.3Oracle Agile Product Lifecycle Management 9.3.5Oracle Agile Product Lifecycle Management 9.3.6Oracle Instantis EnterprisetrackOracle Health Sciences Empirica Signal 7.3.3Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1
7.5
CVSSv3
CVE-2019-12402
The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Co...
Apache Commons CompressFedoraproject Fedora 30Fedoraproject Fedora 31Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Retail Xstore Point Of Service 15.0Oracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Retail Integration Bus 15.0Oracle Webcenter Portal 12.2.1.3.0Oracle Flexcube Investor Servicing 12.4.0Oracle Peoplesoft Enterprise Pt Peopletools 8.56Oracle Retail Xstore Point Of Service 16.0Oracle Flexcube Investor Servicing 14.0.0Oracle Retail Integration Bus 16.0Oracle Banking Platform 2.6.2Oracle Flexcube Investor Servicing 14.1.0Oracle Webcenter Portal 12.2.1.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Communications Ip Service Activator 7.4.0
5.5
CVSSv3
CVE-2019-12415
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an malicious user to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Pro...
Apache PoiOracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.4.0Oracle Enterprise Manager Base Platform 12.1.0.5Oracle Flexcube Private Banking 12.0.0Oracle Banking Platform 2.4.1Oracle Enterprise Repository 12.1.3.0.0Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Insurance Rules Palette 10.2.0Oracle Application Testing Suite 12.5.0.3Oracle Webcenter Portal 12.2.1.3.0Oracle Banking Payments 14.0.0Oracle Webcenter Sites 12.2.1.3.0Oracle Banking Payments 14.1.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Application Testing Suite 13.1.0.1Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Retail Order Broker 15.0Oracle Retail Order Broker 16.0
6.5
CVSSv3
CVE-2020-5421
In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.
Vmware Spring FrameworkOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Weblogic Server 12.1.3.0.0Oracle Insurance Rules Palette 10.2.0Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.2.1.3.0Oracle Endeca Information Discovery Integrator 3.2.0Oracle Retail Predictive Application Server 14.1Oracle Retail Order Broker 15.0Oracle Retail Order Broker 16.0Oracle Retail Integration Bus 14.1.3Oracle Retail Returns Management 14.1Oracle Insurance Policy Administration 10.2Oracle Enterprise Data Quality 12.2.1.3.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Retail Invoice Matching 14.0Oracle Retail Invoice Matching 14.1Oracle Fusion Middleware 12.2.1.3.0Oracle Weblogic Server 12.2.1.4.0Oracle Fusion Middleware 12.2.1.4.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38298CVE-2024-20356CVE-2023-21987CVE-2024-33217bypassCVE-2024-31804CVE-2024-32660unauthorizedSSRF
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook