Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle autovue for agile product lifecycle management 21.0.2 vulnerabilities and exploits

(subscribe to this query)
3.5
CVSSv3

CVE-2021-34428

For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this c...
Eclipse JettyDebian Debian Linux 10.0Netapp Active Iq Unified Manager -Netapp E-series Santricity Os ControllerNetapp E-series Santricity Web Services -Netapp Element Plug-in For Vcenter Server -Netapp Santricity Cloud Connector -Netapp Snap Creator Framework -Netapp Snapmanager -Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Communications Element Manager 8.2.2Oracle Communications Services Gatekeeper 7.0
5.3
CVSSv3

CVE-2021-28164

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web....
Eclipse Jetty 9.4.37Eclipse Jetty 9.4.38Netapp Cloud Manager -Netapp E-series Performance Analyzer -Netapp E-series Santricity Os ControllerNetapp E-series Santricity Web Services -Netapp Element Plug-in For Vcenter Server -Netapp Santricity Cloud Connector -Netapp Snapcenter -Netapp Snapcenter Plug-in -Netapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data Ontap
8.1
CVSSv3

CVE-2020-14061

FasterXML jackson-databind 2.x prior to 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnec...
Fasterxml Jackson-databindNetapp Active Iq Unified ManagerNetapp Steelstore Cloud Integrated Storage -Debian Debian Linux 8.0Oracle Agile Plm 9.3.6Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Banking Digital Experience 18.1Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1
7.5
CVSSv3

CVE-2021-28165

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
Eclipse JettyOracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Element Manager 8.2.2Oracle Communications Services Gatekeeper 7.0Oracle Communications Session Report ManagerOracle Communications Session Route ManagerOracle Rest Data ServicesOracle Siebel Core - AutomationJenkins JenkinsNetapp Cloud ManagerNetapp E-series Performance Analyzer
5.3
CVSSv3

CVE-2021-34429

For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-281...
Eclipse JettyNetapp E-series Santricity Os ControllerNetapp E-series Santricity Web Services -Netapp Element Plug-in For Vcenter Server -Netapp Hci Management Node -Netapp Snap Creator Framework -Netapp Snapcenter Plug-in -Netapp Solidfire -Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.5.0Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0
8.1
CVSSv3

CVE-2020-24616

FasterXML jackson-databind 2.x prior to 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).
Fasterxml Jackson-databindNetapp Active Iq Unified Manager -Oracle Agile Plm 9.3.6Oracle Application Testing Suite 13.3.0.1Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Banking Liquidity Management 14.2Oracle Banking Liquidity Management 14.3Oracle Banking Liquidity Management 14.5Oracle Banking Supply Chain Finance 14.2Oracle Banking Supply Chain Finance 14.3Oracle Banking Supply Chain Finance 14.5Oracle Blockchain Platform
9.8
CVSSv3

CVE-2020-9547

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).
Fasterxml Jackson-databindNetapp Active Iq Unified ManagerDebian Debian Linux 8.0Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Banking PlatformOracle Communications Contacts Server 8.0.0.4.0Oracle Communications Evolved Communications Application Server 7.1Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Communications Network Charging And ControlOracle Communications Network Charging And Control 6.0.1Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Enterprise Manager Base Platform 13.4.0.0
2.7
CVSSv3

CVE-2021-28163

In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that m...
Eclipse JettyEclipse Jetty 10.0.0Eclipse Jetty 10.0.1Eclipse Jetty 11.0.0Eclipse Jetty 11.0.1Fedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Apache IgniteApache Solr 8.8.1Netapp Cloud Manager -Netapp E-series Performance Analyzer -
8.1
CVSSv3

CVE-2020-24750

FasterXML jackson-databind 2.x prior to 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.
Fasterxml Jackson-databindOracle Agile Plm 9.3.6Oracle Application Testing Suite 13.3.0.1Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Liquidity Management 14.2Oracle Banking Liquidity Management 14.3
8.1
CVSSv3

CVE-2020-35490

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.
Fasterxml Jackson-databindNetapp Service Level Manager -Debian Debian Linux 9.0Oracle Agile Plm 9.3.6Oracle Application Testing Suite 13.3.0.1Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Banking Platform 2.6.2Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.8.0Oracle Banking Platform 2.9.0Oracle Banking Platform 2.10.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectCVE-2024-44852CVE-2024-3400CVE-2024-30129insecure direct object referenceCVE-2024-12115CVE-2024-11220CVE-2024-51378privilege escalation
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook