Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle business process management suite 12.2.1.4.0 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2

CVE-2020-1950

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.
Apache TikaOracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Messaging Server 8.0.2Oracle Communications Messaging Server 8.1Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0Canonical Ubuntu Linux 16.04Debian Debian Linux 8.0
4.3
CVSSv2

CVE-2020-1951

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.
Apache TikaOracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Messaging Server 8.0.2Oracle Communications Messaging Server 8.1Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0Canonical Ubuntu Linux 16.04Debian Debian Linux 8.0
9
CVSSv2

CVE-2022-23307

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
Apache ChainsawApache Log4jQos Reload4jOracle Advanced Supply Chain Planning 12.1Oracle Advanced Supply Chain Planning 12.2Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5Oracle Communications Instant Messaging Server 10.0.1.5.0
6
CVSSv2

CVE-2022-23302

JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBi...
Apache Log4jNetapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4jOracle Advanced Supply Chain Planning 12.1Oracle Advanced Supply Chain Planning 12.2Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5
6.8
CVSSv2

CVE-2022-23305

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows malicious users to manipulate the SQL by ent...
Apache Log4jNetapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4jOracle Advanced Supply Chain Planning 12.1Oracle Advanced Supply Chain Planning 12.2Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5
5
CVSSv2

CVE-2019-17359

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.63Apache Tomee 7.0.7Apache Tomee 7.1.2Apache Tomee 8.0.1Netapp Active Iq Unified ManagerNetapp Oncommand Api Services -Netapp Oncommand Workflow Automation -Netapp Service Level Manager -Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications ConvergenceOracle Communications Diameter Signaling Router
5
CVSSv2

CVE-2021-37714

jsoup is a Java library for working with HTML. Those using jsoup versions before 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinit...
Jsoup JsoupQuarkus QuarkusOracle Banking Trade Finance 14.5Oracle Banking Treasury Management 14.5Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Flexcube Universal BankingOracle Flexcube Universal Banking 14.5Oracle Hospitality Token Proxy Service 19.2Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera Unifier 20.12
6
CVSSv2

CVE-2021-4104

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests t...
Apache Log4j 1.2Fedoraproject Fedora 35Redhat Codeready Studio 12.0Redhat Integration Camel K -Redhat Integration Camel Quarkus -Redhat Jboss A-mq 6.0.0Redhat Jboss A-mq 7Redhat Jboss A-mq Streaming -Redhat Jboss Data Grid 7.0.0Redhat Jboss Data Virtualization 6.0.0Redhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Enterprise Application Platform 7.0
2.1
CVSSv2

CVE-2020-17521

Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some context...
Apache GroovyApache Groovy 4.0.0Netapp Snapcenter -Oracle Agile Engineering Data Management 6.2.1.0Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.6Oracle Agile Plm Mcad Connector 3.4Oracle Agile Plm Mcad Connector 3.6Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Brm - Elastic Charging Engine 11.3.0.9.0Oracle Communications Brm - Elastic Charging Engine 12.0.0.3
5
CVSSv2

CVE-2021-35516

When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz pa...
Apache Commons CompressNetapp Active Iq Unified Manager -Netapp Oncommand Insight -Oracle Banking Digital ExperienceOracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Banking Digital Experience 21.1Oracle Banking Enterprise Default Management 2.7.0Oracle Banking Party Management 2.7.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0
Preferred Score:
CVSSv2
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-23629CVE-2024-52331CVE-2025-0693precious metals charts and widgets for wordpressneofixsimple downloads listCVE-2025-23544CVE-2025-21298client sidememory leakCVE-2019-5418XSSdeebot x5 pro plus
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook