Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle peoplesoft enterprise peopletools 8.58 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2021-36160
A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).
Apache Http ServerFedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Cloud Backup -Netapp Storagegrid -Netapp Clustered Data Ontap -Oracle Http Server 12.2.1.3.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Http Server 12.2.1.4.0Oracle Zfs Storage Appliance Kit 8.8Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Broadcom Brocade Fabric Operating System Firmware -
5
CVSSv2
CVE-2021-34798
Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and previous versions.
Apache Http ServerFedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Cloud Backup -Netapp Storagegrid -Netapp Clustered Data Ontap -Tenable Tenable.scOracle Http Server 12.2.1.3.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Http Server 12.2.1.4.0Oracle Zfs Storage Appliance Kit 8.8Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Broadcom Brocade Fabric Operating System Firmware -Siemens Sinema Server 14.0
7.5
CVSSv2
CVE-2021-3711
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" paramete...
Openssl OpensslDebian Debian Linux 10.0Debian Debian Linux 11.0Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Storage Encryption -Netapp E-series Santricity Os ControllerOracle Peoplesoft Enterprise Peopletools 8.57Oracle Jd Edwards World Security A9.4Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Session Border Controller 8.4Oracle Enterprise Communications Broker 3.2.0Oracle Zfs Storage Appliance Kit 8.8Oracle Peoplesoft Enterprise Peopletools 8.59
5.8
CVSSv2
CVE-2021-3712
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Santricity Smi-s Provider -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Solidfire -Netapp Hci Management Node -Netapp Manageability Software Development Kit -Netapp Storage Encryption -Netapp E-series Santricity Os ControllerMcafee Epolicy Orchestrator 5.10.0Mcafee Epolicy OrchestratorTenable Tenable.scTenable Nessus Network MonitorOracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Zfs Storage Appliance Kit 8.8Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Mysql ServerOracle Mysql Workbench
5
CVSSv2
CVE-2021-37714
jsoup is a Java library for working with HTML. Those using jsoup versions before 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinit...
Jsoup JsoupQuarkus QuarkusOracle Webcenter Portal 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Flexcube Universal BankingOracle Peoplesoft Enterprise Peopletools 8.58Oracle Webcenter Portal 12.2.1.4.0Oracle Primavera Unifier 20.12Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Messaging Server 8.1Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera Unifier 21.12Oracle Banking Trade Finance 14.5Oracle Banking Treasury Management 14.5Oracle Flexcube Universal Banking 14.5Oracle Hospitality Token Proxy Service 19.2Oracle Retail Customer Management And Segmentation FoundationNetapp Management Services For Element Software And Netapp Hci -Oracle Middleware Common Libraries And Tools 12.2.1.4.0Oracle Middleware Common Libraries And Tools 12.2.1.3.0Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0
7.5
CVSSv2
CVE-2021-22931
Node.js prior to 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijac...
Nodejs Node.jsNetapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -Netapp Nextgen Api -Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Graalvm 20.3.3Oracle Graalvm 21.2.0Oracle Mysql ClusterSiemens Sinec Infrastructure Network Services
5
CVSSv2
CVE-2021-22939
If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted.
Nodejs Node.jsOracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Graalvm 20.3.3Oracle Graalvm 21.2.0Oracle Mysql ClusterOracle Jd Edwards Enterpriseone ToolsNetapp Nextgen Api -Siemens Sinec Infrastructure Network ServicesDebian Debian Linux 10.0
5
CVSSv2
CVE-2021-22940
Node.js prior to 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
Nodejs Node.jsOracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Graalvm 20.3.3Oracle Graalvm 21.2.0Oracle Jd Edwards Enterpriseone ToolsNetapp Nextgen Api -Siemens Sinec Infrastructure Network ServicesDebian Debian Linux 10.0
3.5
CVSSv2
CVE-2021-37695
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed Fake Objects HTML, which could ...
Ckeditor CkeditorDebian Debian Linux 9.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Financial Services Analytical Applications Infrastructure 8.0.3Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Commerce Merchandising 11.3.2Oracle Jd Edwards Enterpriseone ToolsOracle Documaker 12.6.3Oracle Documaker 12.6.4Oracle Financial Services Model Management And GovernanceOracle Banking Party Management 2.7.0Oracle Financial Services Analytical Applications InfrastructureOracle Application Express
3.5
CVSSv2
CVE-2021-32808
ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget HTML, which could re...
Ckeditor CkeditorFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Webcenter Sites 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Webcenter Sites 12.2.1.4.0Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Commerce Merchandising 11.3.2Oracle Documaker 12.6.3Oracle Documaker 12.6.4Oracle Banking Party Management 2.7.0Oracle Siebel Ui FrameworkOracle Jd Edwards Enterpriseone ToolsOracle Financial Services Model Management And Governance 8.1.0.0.0Oracle Financial Services Model Management And Governance 8.0.8.0.0Oracle Financial Services Analytical Applications InfrastructureOracle Application Express
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-28254CVE-2024-32515CVE-2024-21338validationCVE-2024-32522dosCVE-2024-2101CVE-2024-21107elevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook