oracle advanced supply chain planning 12.1 vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain (component: Core). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

Oracle Advanced Supply Chain Planning 12.1 Oracle Advanced Supply Chain Planning 12.2

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.

Apache Chainsaw Apache Log4j Qos Reload4j Oracle Advanced Supply Chain Planning 12.1 Oracle Advanced Supply Chain Planning 12.2 Oracle Business Intelligence 5.9.0.0.0 Oracle Business Intelligence 12.2.1.3.0 Oracle Business Intelligence 12.2.1.4.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Communications Eagle Ftp Table Base Retrieval 4.5 Oracle Communications Instant Messaging Server 10.0.1.5.0

1 Github repository1 Article

JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBi...

Apache Log4j Netapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4j Oracle Advanced Supply Chain Planning 12.1 Oracle Advanced Supply Chain Planning 12.2 Oracle Business Intelligence 5.9.0.0.0 Oracle Business Intelligence 12.2.1.3.0 Oracle Business Intelligence 12.2.1.4.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Communications Eagle Ftp Table Base Retrieval 4.5

2 Articles

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows malicious users to manipulate the SQL by ent...

Apache Log4j Netapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4j Oracle Advanced Supply Chain Planning 12.1 Oracle Advanced Supply Chain Planning 12.2 Oracle Business Intelligence 5.9.0.0.0 Oracle Business Intelligence 12.2.1.3.0 Oracle Business Intelligence 12.2.1.4.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Communications Eagle Ftp Table Base Retrieval 4.5

2 Github repositories1 Article

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests t...

Apache Log4j 1.2 Fedoraproject Fedora 35 Redhat Codeready Studio 12.0 Redhat Integration Camel K -Redhat Integration Camel Quarkus -Redhat Jboss A-mq 6.0.0 Redhat Jboss A-mq 7 Redhat Jboss A-mq Streaming -Redhat Jboss Data Grid 7.0.0 Redhat Jboss Data Virtualization 6.0.0 Redhat Jboss Enterprise Application Platform 6.0.0 Redhat Jboss Enterprise Application Platform 7.0

9 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook