Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle enterprise manager ops center 12.4.0.0 vulnerabilities and exploits

(subscribe to this query)
5.3
CVSSv3
CVE-2019-1551
There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult ...
Openssl OpensslOpensuse Leap 15.1Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Mysql Enterprise MonitorOracle Enterprise Manager Ops Center 12.4.0.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Fedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Debian Debian Linux 10.0Tenable Log Correlation Engine
7.5
CVSSv3
CVE-2020-13871
SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
Sqlite Sqlite 3.32.2Fedoraproject Fedora 33Debian Debian Linux 9.0Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Network Charging And Control 12.0.2Oracle Communications Network Charging And Control 6.0.1Oracle Zfs Storage Appliance Kit 8.8Oracle Communications Messaging Server 8.1Oracle Mysql WorkbenchSiemens Sinec Infrastructure Network ServicesNetapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -
8.8
CVSSv3
CVE-2021-3518
There's a flaw in libxml2 in versions prior to 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability...
Xmlsoft Libxml2Debian Debian Linux 9.0Redhat Jboss Core Services -Redhat Enterprise Linux 8.0Fedoraproject Fedora 33Fedoraproject Fedora 34Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Snapdrive -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Hci H410c Firmware -Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Mysql WorkbenchOracle Real User Experience Insight 13.4.1.0Oracle Real User Experience Insight 13.5.1.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0
7.5
CVSSv3
CVE-2020-11993
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "in...
Apache Http ServerNetapp Clustered Data Ontap -Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Opensuse Leap 15.1Opensuse Leap 15.2Debian Debian Linux 10.0Fedoraproject Fedora 31Fedoraproject Fedora 32Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Route ManagerOracle Communications Session Report ManagerOracle Communications Element ManagerOracle Zfs Storage Appliance Kit 8.8
5.9
CVSSv3
CVE-2021-3537
A vulnerability found in libxml2 in versions prior to 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the applic...
Xmlsoft Libxml2Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Jboss Core Services -Redhat Enterprise Linux 8.0Debian Debian Linux 9.0Fedoraproject Fedora 33Fedoraproject Fedora 34Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Snapdrive -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Hci H410c Firmware -Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Openjdk 8Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Mysql WorkbenchOracle Real User Experience Insight 13.4.1.0
9.8
CVSSv3
CVE-2020-11984
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
Apache Http ServerNetapp Clustered Data Ontap -Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 31Fedoraproject Fedora 32Opensuse Leap 15.1Opensuse Leap 15.2Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Route ManagerOracle Communications Session Report ManagerOracle Communications Element ManagerOracle Zfs Storage Appliance Kit 8.8
5.3
CVSSv3
CVE-2020-1934
In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.
Apache Http ServerFedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Oracle Instantis EnterprisetrackOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Zfs Storage Appliance Kit 8.8
6.5
CVSSv3
CVE-2020-24977
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
Xmlsoft Libxml2 2.9.10Debian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Opensuse Leap 15.1Opensuse Leap 15.2Netapp Snapdrive -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Active Iq Unified ManagerNetapp Manageability Software Development Kit -Netapp Inventory Collect Tool -Netapp Hci H410c Firmware -Oracle Http Server 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Http Server 12.2.1.4.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Mysql WorkbenchOracle Real User Experience Insight 13.4.1.0
7.5
CVSSv3
CVE-2019-5427
c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.
Mchange C3p0Fedoraproject Fedora 29Fedoraproject Fedora 30Oracle Retail Xstore Point Of Service 15.0Oracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Webcenter Sites 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Webcenter Sites 12.2.1.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Communications Ip Service Activator 7.4.0Oracle Communications Ip Service Activator 7.3.0Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Route ManagerOracle Enterprise Manager Base Platform 13.2.1.0Oracle Documaker
5.5
CVSSv3
CVE-2020-15358
In SQLite prior to 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
Sqlite SqliteCanonical Ubuntu Linux 20.04Apple Iphone OsApple WatchosApple IcloudApple TvosApple IpadosApple MacosOracle Outside In Technology 8.5.4Oracle Outside In Technology 8.5.5Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Network Charging And Control 12.0.2Oracle MysqlOracle Communications Network Charging And Control 6.0.1Oracle Communications Messaging Server 8.1Oracle Communications Cloud Native Core Policy 1.14.0Siemens Sinec Infrastructure Network Services
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook