oracle agile product lifecycle management 9.3.3 vulnerabilities and exploits

Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Folders, Files & Attachments). Supported versions that are affected are 9.3.3, 9.3.4, 9.3.5 and 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with n...

Oracle Agile Product Lifecycle Management 9.3.3 Oracle Agile Product Lifecycle Management 9.3.4 Oracle Agile Product Lifecycle Management 9.3.5 Oracle Agile Product Lifecycle Management 9.3.6

6.1

CVSSv3

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). Supported versions that are affected are 9.3.3, 9.3.5 and 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PL...

Oracle Agile Product Lifecycle Management Framework 9.3.3 Oracle Agile Product Lifecycle Management Framework 9.3.5 Oracle Agile Product Lifecycle Management Framework 9.3.6

6.4

CVSSv3

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect confidentiality and integrity via vectors related to Security, a different vulnerability than CVE-2016-...

Oracle Agile Product Lifecycle Management Framework 9.3.1.1 Oracle Agile Product Lifecycle Management Framework 9.3.1.2 Oracle Agile Product Lifecycle Management Framework 9.3.2 Oracle Agile Product Lifecycle Management Framework 9.3.3

In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located be...

Apache Tomcat Apache Tomcat 9.0.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Canonical Ubuntu Linux 16.04 Opensuse Leap 15.1 Netapp Data Availability Services -Netapp Oncommand System Manager Oracle Agile Engineering Data Management 6.2.1.0 Oracle Agile Product Lifecycle Management 9.3.3 Oracle Agile Product Lifecycle Management 9.3.5

7.5

CVSSv3

Spring Framework, versions 5.0.x before 5.0.7 and 4.3.x before 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for...

Vmware Spring Framework Oracle Agile Product Lifecycle Management 9.3.3 Oracle Agile Product Lifecycle Management 9.3.4 Oracle Agile Product Lifecycle Management 9.3.5 Oracle Application Testing Suite 12.5.0.3 Oracle Application Testing Suite 13.1.0.1 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Communications Network Integrity Oracle Communications Online Mediation Controller 6.1 Oracle Communications Services Gatekeeper Oracle Communications Unified Inventory Management 7.3.2

7.3

CVSSv3

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an malicious user to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of th...

Apache Commons Beanutils Apache Nifi 1.14.0 Apache Nifi 1.15.0 Debian Debian Linux 8.0 Opensuse Leap 15.0 Opensuse Leap 15.1 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Eus 7.7 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Server Aus 7.7

7.5

CVSSv3

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor t...

Apache Axis 1.4 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Agile Product Lifecycle Management Framework 9.3.3 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Big Data Discovery 1.6 Oracle Communications Asap Cartridges 7.2 Oracle Communications Asap Cartridges 7.3 Oracle Communications Design Studio 7.3.4.3.0 Oracle Communications Design Studio 7.3.5.5.0 Oracle Communications Design Studio 7.4.0.4.0 Oracle Communications Design Studio 7.4.1.1.0

1 EDB exploit2 Github repositories

6.1

CVSSv3

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

Apache Axis Oracle Agile Engineering Data Management 6.2.1.0 Oracle Agile Product Lifecycle Management Framework 9.3.3 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Big Data Discovery 1.6 Oracle Communications Asap Cartridges 7.2 Oracle Communications Asap Cartridges 7.3 Oracle Communications Design Studio 7.3.4.3.0 Oracle Communications Design Studio 7.3.5.5.0 Oracle Communications Design Studio 7.4.0.4.0 Oracle Communications Design Studio 7.4.1.1.0

6.1

CVSSv3

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Redhat Hibernate Validator Redhat Hibernate Validator 6.1.0 Redhat Fuse 1.0 Redhat Jboss Data Grid -Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform 7.2 Redhat Jboss Enterprise Application Platform 7.3 Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Snapcenter Plug-in -

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

oracle agile product lifecycle management 9.3.3 vulnerabilities and exploits

CVE-2019-2817

CVE-2020-2920

CVE-2016-3420

CVE-2016-3431

CVE-2020-1935

CVE-2018-11040

CVE-2019-10086

CVE-2019-0227

CVE-2018-8032

CVE-2019-10219

Vulmon Search

About

Products

Connect