oracle enterprise manager base platform 13.2.1.0 vulnerabilities and exploits

(subscribe to this query)

Apache CXF prior to 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token services, where it does not validate that the authenticated principal is equal to that of the suppli...

Apache Cxf Oracle Commerce Guided Search 11.3.2 Oracle Enterprise Manager Base Platform 13.2.1.0 Oracle Flexcube Private Banking 12.0.0 Oracle Flexcube Private Banking 12.1.0 Oracle Retail Order Broker 15.0

Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a man-in-the-midd...

Apache Cxf Oracle Communications Diameter Signaling Router Oracle Communications Element Manager Oracle Communications Session Report Manager Oracle Enterprise Manager Base Platform 13.2.1.0 Oracle Peoplesoft Enterprise Peopletools 8.56 Netapp Oncommand Workflow Automation -Netapp Snapmanager -Oracle Communications Diameter Signaling Router Idih Oracle Communications Session Route Manager

c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.

Mchange C3p0 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Oracle Communications Ip Service Activator 7.3.0 Oracle Communications Ip Service Activator 7.4.0 Oracle Communications Session Route Manager Oracle Documaker Oracle Enterprise Manager Base Platform 13.2.1.0 Oracle Enterprise Manager Ops Center 12.4.0.0 Oracle Flexcube Private Banking 12.0.0 Oracle Flexcube Private Banking 12.1.0 Oracle Hyperion Infrastructure Technology 11.1.2.4

Spring Framework, versions 5.2.x before 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable because preflight reques...

Vmware Spring Framework Oracle Application Testing Suite 13.3.0.1 Oracle Communications Brm - Elastic Charging Engine 11.3 Oracle Communications Brm - Elastic Charging Engine 12.0 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager 8.1.1 Oracle Communications Element Manager 8.2.0 Oracle Communications Element Manager 8.2.1 Oracle Communications Policy Management 12.5.0 Oracle Communications Session Route Manager 8.1.1 Oracle Communications Session Route Manager 8.2.0 Oracle Communications Session Route Manager 8.2.1

In Spring Framework, versions 5.2.x before 5.2.3, versions 5.1.x before 5.1.13, and versions 5.0.x before 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attrib...

Vmware Spring Framework Oracle Application Testing Suite 13.3.0.1 Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0 Oracle Communications Cloud Native Core Policy 1.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager 8.1.1 Oracle Communications Element Manager 8.2.0 Oracle Communications Element Manager 8.2.1 Oracle Communications Policy Management 12.5.0 Oracle Communications Session Report Manager 8.1.1 Oracle Communications Session Report Manager 8.2.0

2 Github repositories

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler up to and including 2.3.0 allows XXE attacks via a job description.

Softwareag Quartz Oracle Apache Batik Mapviewer 12.2.0.1 Oracle Apache Batik Mapviewer 18c Oracle Apache Batik Mapviewer 19c Oracle Banking Enterprise Originations 2.7.0 Oracle Banking Enterprise Originations 2.8.0 Oracle Banking Enterprise Product Manufacturing 2.7.0 Oracle Banking Enterprise Product Manufacturing 2.8.0 Oracle Banking Payments Oracle Communications Ip Service Activator 7.3.0 Oracle Communications Ip Service Activator 7.4.0 Oracle Communications Session Route Manager

2 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook