oracle middleware common libraries and tools 12.2.1.3.0 vulnerabilities and exploits

(subscribe to this query)

The OWASP Java HTML Sanitizer prior to 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

Owasp Java Html Sanitizer Oracle Middleware Common Libraries And Tools 12.2.1.3.0 Oracle Middleware Common Libraries And Tools 12.2.1.4.0 Oracle Primavera Unifier Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12 Oracle Primavera Unifier 21.12

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.

Apache Xmlbeans Netapp Oncommand Unified Manager Core Package -Netapp Snap Creator Framework -Netapp Snapmanager -Debian Debian Linux 9.0 Oracle Middleware Common Libraries And Tools 12.2.1.3.0 Oracle Middleware Common Libraries And Tools 12.2.1.4.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59

A vulnerability in sshd-core of Apache Mina SSHD allows an malicious user to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0

Apache Sshd Oracle Banking Payments 14.5 Oracle Banking Trade Finance 14.5 Oracle Banking Treasury Management 14.5 Oracle Communications Cloud Native Core Console 1.9.0 Oracle Flexcube Universal Banking Oracle Flexcube Universal Banking 14.5 Oracle Middleware Common Libraries And Tools 12.2.1.3.0 Oracle Middleware Common Libraries And Tools 12.2.1.4.0 Oracle Middleware Common Libraries And Tools 14.1.1.0.0 Oracle Oss Support Tools 2.12.42 Oracle Retail Customer Management And Segmentation Foundation 18.0

jsoup is a Java library for working with HTML. Those using jsoup versions before 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinit...

Jsoup Jsoup Quarkus Quarkus Oracle Banking Trade Finance 14.5 Oracle Banking Treasury Management 14.5 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Flexcube Universal Banking Oracle Flexcube Universal Banking 14.5 Oracle Hospitality Token Proxy Service 19.2 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Primavera Unifier 20.12

OWASP AntiSamy prior to 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for the : character.

Antisamy Project Antisamy Oracle Retail Back Office 14.0 Oracle Retail Back Office 14.1 Oracle Retail Central Office 14.0 Oracle Retail Central Office 14.1 Oracle Retail Returns Management 14.0 Oracle Retail Returns Management 14.1 Oracle Banking Enterprise Default Management 2.6.2 Oracle Banking Enterprise Default Management 2.7.0 Oracle Banking Enterprise Default Management 2.7.1 Oracle Banking Enterprise Default Management 2.10.0 Oracle Banking Enterprise Default Management 2.12.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook