oracle commerce guided search 11.3.2 vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Workbench). The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Guid...

Oracle Commerce Guided Search 11.3.2

Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Tools and Frameworks). The supported version that is affected is 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Co...

Oracle Commerce Guided Search 11.3.2

Apache CXF prior to 3.3.4 and 3.2.11 does not restrict the number of message attachments present in a given message. This leaves open the possibility of a denial of service type attack, where a malicious user crafts a message containing a very large number of message attachments....

Apache Cxf Oracle Commerce Guided Search 11.3.2 Oracle Flexcube Private Banking 12.0.0 Oracle Flexcube Private Banking 12.1.0 Oracle Retail Order Broker 15.0

Apache CXF prior to 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token services, where it does not validate that the authenticated principal is equal to that of the suppli...

Apache Cxf Oracle Commerce Guided Search 11.3.2 Oracle Enterprise Manager Base Platform 13.2.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Flexcube Private Banking 12.1.0 Oracle Retail Order Broker 15.0

A flaw was found in jackson-databind prior to 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Fasterxml Jackson-databind Netapp Active Iq Unified Manager -Netapp Oncommand Api Services -Netapp Oncommand Insight -Netapp Service Level Manager -Apache Nifi Debian Debian Linux 9.0 Oracle Commerce Guided Search And Experience Manager 11.3.2

This affects the package json prior to 10.0.0. It is possible to inject arbritary commands using the parseLookup function.

Joyent Json Oracle Commerce Guided Search 11.3.2 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0 Oracle Financial Services Regulatory Reporting With Agilereporter 8.0.9.6.3 Oracle Timesten In-memory Database

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Clipboard](https://ckeditor.com/cke4/addon/clipboard) package. The vulnerability allowed to abuse paste functionality using malformed HTML, which...

Ckeditor Ckeditor Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Application Express Oracle Banking Party Management 2.7.0 Oracle Commerce Guided Search 11.3.2 Oracle Commerce Merchandising 11.3.2 Oracle Documaker 12.6.3 Oracle Documaker 12.6.4 Oracle Financial Services Analytical Applications Infrastructure Oracle Jd Edwards Enterpriseone Tools

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed Fake Objects HTML, which could ...

Ckeditor Ckeditor Debian Debian Linux 9.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Application Express Oracle Banking Party Management 2.7.0 Oracle Commerce Guided Search 11.3.2 Oracle Commerce Merchandising 11.3.2 Oracle Documaker 12.6.3 Oracle Documaker 12.6.4 Oracle Financial Services Analytical Applications Infrastructure

Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore (JKS/PKCS12)...

Apache Cxf Oracle Commerce Guided Search 11.3.2 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager Oracle Communications Session Report Manager Oracle Communications Session Route Manager 8.1.1 Oracle Communications Session Route Manager 8.2.0 Oracle Communications Session Route Manager 8.2.1 Oracle Flexcube Private Banking 12.0.0 Oracle Flexcube Private Banking 12.1.0 Oracle Retail Order Broker 15.0

In spring cloud gateway versions before 3.1.1+ , applications that are configured to enable HTTP2 and no key store or trusted certificates are set will be configured to use an insecure TrustManager. This makes the gateway able to connect to remote services with invalid or custom ...

Vmware Spring Cloud Gateway 3.1.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Cloud Native Core Binding Support Function 22.1.3 Oracle Communications Cloud Native Core Console 22.2.0 Oracle Communications Cloud Native Core Network Repository Function 22.1.2 Oracle Communications Cloud Native Core Network Repository Function 22.2.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.1

1 Github repository

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook