oracle communications interactive session recorder 6.3 vulnerabilities and exploits

(subscribe to this query)

Spring Security 5.4.x before 5.4.4, 5.3.x before 5.3.8.RELEASE, 5.2.x before 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programm...

Pivotal Software Spring Security Vmware Spring Security Oracle Communications Element Manager Oracle Communications Interactive Session Recorder 6.3 Oracle Communications Interactive Session Recorder 6.4 Oracle Communications Unified Inventory Management 7.4.1 Oracle Hospitality Cruise Shipboard Property Management System 20.1.0 Oracle Insurance Policy Administration 11.2.0 Oracle Insurance Policy Administration 11.3.0 Oracle Mysql Enterprise Monitor

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.

Fasterxml Jackson-databind Netapp Service Level Manager -Debian Debian Linux 9.0 Oracle Agile Plm 9.3.6 Oracle Application Testing Suite 13.3.0.1 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Platform 2.6.2 Oracle Banking Platform 2.7.0 Oracle Banking Platform 2.7.1 Oracle Banking Platform 2.8.0 Oracle Banking Platform 2.9.0 Oracle Banking Platform 2.10.0

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.

Fasterxml Jackson-databind Netapp Cloud Backup -Netapp Service Level Manager -Debian Debian Linux 9.0 Oracle Agile Plm 9.3.6 Oracle Application Testing Suite 13.3.0.1 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Platform 2.6.2 Oracle Banking Platform 2.7.0 Oracle Banking Platform 2.7.1 Oracle Banking Platform 2.8.0 Oracle Banking Platform 2.9.0

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.

Fasterxml Jackson-databind Netapp Oncommand Api Services -Netapp Oncommand Workflow Automation -Netapp Service Level Manager -Fedoraproject Fedora 32 Quarkus Quarkus Apache Iotdb Oracle Agile Plm 9.3.6 Oracle Agile Product Lifecycle Management Integration Pack 3.6 Oracle Banking Apis Oracle Banking Apis 19.1 Oracle Banking Apis 19.2

1 Github repository1 Article

In Apache Commons IO prior to 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not furt...

Apache Commons Io 2.2 Apache Commons Io 2.3 Apache Commons Io 2.4 Apache Commons Io 2.5 Apache Commons Io 2.6 Debian Debian Linux 9.0 Oracle Access Manager 11.1.2.3.0 Oracle Access Manager 12.2.1.3.0 Oracle Access Manager 12.2.1.4.0 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Agile Plm 9.3.6 Oracle Application Performance Management 13.4.1.0

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Redhat Hibernate Validator Redhat Hibernate Validator 6.1.0 Redhat Fuse 1.0 Redhat Jboss Data Grid -Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform 7.2 Redhat Jboss Enterprise Application Platform 7.3 Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Snapcenter Plug-in -

Apache Log4j2 versions 2.0-alpha1 up to and including 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted strin...

Apache Log4j Netapp Cloud Manager -Debian Debian Linux 10.0 Debian Debian Linux 11.0 Sonicwall Email Security Sonicwall Network Security Manager Sonicwall Web Application Firewall Sonicwall 6bk1602-0aa12-0tp0 Firmware Sonicwall 6bk1602-0aa22-0tp0 Firmware Sonicwall 6bk1602-0aa32-0tp0 Firmware Sonicwall 6bk1602-0aa42-0tp0 Firmware Sonicwall 6bk1602-0aa52-0tp0 Firmware

49 Github repositories5 Articles

Apache Log4j2 versions 2.0-beta7 up to and including 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the tar...

Apache Log4j Apache Log4j 2.0 Oracle Communications Diameter Signaling Router Oracle Communications Interactive Session Recorder 6.3 Oracle Communications Interactive Session Recorder 6.4 Oracle Primavera Gateway Oracle Primavera Gateway 21.12.0 Oracle Primavera P6 Enterprise Project Portfolio Management Oracle Primavera P6 Enterprise Project Portfolio Management 21.12.0.0 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12

25 Github repositories4 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook