oracle managed file transfer 12.2.1.3.0 vulnerabilities and exploits

Vulnerability in the Oracle Managed File Transfer component of Oracle Fusion Middleware (subcomponent: MFT Runtime Server). Supported versions that are affected are 19.1.0.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via ...

Oracle Managed File Transfer 12.2.1.3.0 Oracle Managed File Transfer 19.1.0.0.0

3.7

CVSSv2

The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local malicious user to perform actions with the privileges of the user that t...

Apache Tomcat Apache Tomcat 10.0.0 Apache Tomcat 10.1.0 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0 Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0 Oracle Managed File Transfer 12.2.1.3.0 Oracle Managed File Transfer 12.2.1.4.0 Oracle Mysql Enterprise Monitor Debian Debian Linux 10.0 Debian Debian Linux 11.0

CVSSv2

An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryException could occur leading to a denial ...

Apache Tomcat Apache Tomcat 9.0.0 Apache Tomcat 10.0.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Oncommand System Manager Opensuse Leap 15.1 Opensuse Leap 15.2 Canonical Ubuntu Linux 20.04 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Agile Plm 9.3.3 Oracle Agile Plm 9.3.5

CVSSv2

When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results...

Apache Tomcat Apache Tomcat 9.0.0 Apache Tomcat 10.0.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Oracle Agile Plm 9.3.3 Oracle Agile Plm 9.3.6 Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.6.0 Oracle Communications Instant Messaging Server 10.0.1.5.0 Oracle Database 12.2.0.1 Oracle Database 19c

4.4

CVSSv2

The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note tha...

CVSSv2

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.

Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.63 Apache Tomee 7.0.7 Apache Tomee 7.1.2 Apache Tomee 8.0.1 Netapp Active Iq Unified Manager Netapp Oncommand Api Services -Netapp Oncommand Workflow Automation -Netapp Service Level Manager -Oracle Business Process Management Suite 12.2.1.3.0 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Communications Convergence Oracle Communications Diameter Signaling Router

CVSSv2

Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and previous versions have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fi...

Bouncycastle Fips Java Api Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api Debian Debian Linux 9.0 Oracle Api Gateway 11.1.2.4.0 Oracle Business Process Management Suite 11.1.1.9.0 Oracle Business Process Management Suite 12.1.3.0.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Business Transaction Management 12.1.0 Oracle Communications Application Session Controller 3.7.1 Oracle Communications Application Session Controller 3.8.0 Oracle Communications Converged Application Server Oracle Communications Webrtc Session Controller

1 Github repository

CVSSv2

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lea...

Apache Tomcat Apache Tomcat 9.0.0 Apache Tomcat 10.0.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Oncommand System Manager Opensuse Leap 15.1 Opensuse Leap 15.2 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 20.04 Mcafee Epolicy Orchestrator 5.9.0 Mcafee Epolicy Orchestrator 5.9.1

2 Github repositories

CVSSv2

Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ign...

Apache Tomcat Apache Tomee 8.0.6 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Oracle Agile Plm 9.3.6 Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0 Oracle Communications Diameter Signaling Router Oracle Communications Instant Messaging Server 10.0.1.5.0 Oracle Communications Policy Management 12.5.0 Oracle Communications Pricing Design Center 12.0.0.3.0 Oracle Communications Session Report Manager

4.4

CVSSv2

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; a...

Apache Tomcat Apache Tomcat 9.0.0 Apache Tomcat 10.0.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Opensuse Leap 15.1 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 20.04 Oracle Agile Engineering Data Management 6.2.1.0

16 Github repositories

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

oracle managed file transfer 12.2.1.3.0 vulnerabilities and exploits

CVE-2019-2538

CVE-2022-23181

CVE-2020-13934

CVE-2021-25122

CVE-2021-25329

CVE-2019-17359

CVE-2018-1000180

CVE-2020-13935

CVE-2021-33037

CVE-2020-9484

Vulmon Search

About

Products

Connect