Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle middleware common libraries and tools 12.2.1.4.0 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3

CVE-2021-42575

The OWASP Java HTML Sanitizer prior to 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
Owasp Java Html SanitizerOracle Middleware Common Libraries And Tools 12.2.1.3.0Oracle Middleware Common Libraries And Tools 12.2.1.4.0Oracle Primavera UnifierOracle Primavera Unifier 18.8Oracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Primavera Unifier 21.12
9.1
CVSSv3

CVE-2021-23926

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.
Apache XmlbeansNetapp Oncommand Unified Manager Core Package -Netapp Snap Creator Framework -Netapp Snapmanager -Debian Debian Linux 9.0Oracle Middleware Common Libraries And Tools 12.2.1.3.0Oracle Middleware Common Libraries And Tools 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59
6.5
CVSSv3

CVE-2021-30129

A vulnerability in sshd-core of Apache Mina SSHD allows an malicious user to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0
Apache SshdOracle Banking Payments 14.5Oracle Banking Trade Finance 14.5Oracle Banking Treasury Management 14.5Oracle Communications Cloud Native Core Console 1.9.0Oracle Flexcube Universal BankingOracle Flexcube Universal Banking 14.5Oracle Middleware Common Libraries And Tools 12.2.1.3.0Oracle Middleware Common Libraries And Tools 12.2.1.4.0Oracle Middleware Common Libraries And Tools 14.1.1.0.0Oracle Oss Support Tools 2.12.42Oracle Retail Customer Management And Segmentation Foundation 18.0
7.5
CVSSv3

CVE-2021-37714

jsoup is a Java library for working with HTML. Those using jsoup versions before 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinit...
Jsoup JsoupQuarkus QuarkusOracle Banking Trade Finance 14.5Oracle Banking Treasury Management 14.5Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Flexcube Universal BankingOracle Flexcube Universal Banking 14.5Oracle Hospitality Token Proxy Service 19.2Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera Unifier 20.12
6.1
CVSSv3

CVE-2021-35043

OWASP AntiSamy prior to 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for the : character.
Antisamy Project AntisamyOracle Retail Back Office 14.0Oracle Retail Back Office 14.1Oracle Retail Central Office 14.0Oracle Retail Central Office 14.1Oracle Retail Returns Management 14.0Oracle Retail Returns Management 14.1Oracle Banking Enterprise Default Management 2.6.2Oracle Banking Enterprise Default Management 2.7.0Oracle Banking Enterprise Default Management 2.7.1Oracle Banking Enterprise Default Management 2.10.0Oracle Banking Enterprise Default Management 2.12.0
7.5
CVSSv3

CVE-2021-42340

The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the c...
Apache TomcatApache Tomcat 10.0.0Apache Tomcat 10.1.0Netapp Hci -Netapp Management Services For Element Software -Debian Debian Linux 11.0Oracle Agile Engineering Data Management 6.2.1.0Oracle Big Data Spatial And GraphOracle Communications Diameter Signaling RouterOracle Hospitality Cruise Shipboard Property Management System 20.1.0Oracle Managed File Transfer 12.2.1.3.0Oracle Managed File Transfer 12.2.1.4.0
8.8
CVSSv3

CVE-2022-23302

JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBi...
Apache Log4jNetapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4jOracle Advanced Supply Chain Planning 12.1Oracle Advanced Supply Chain Planning 12.2Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5
8.8
CVSSv3

CVE-2022-23307

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
Apache ChainsawApache Log4jQos Reload4jOracle Advanced Supply Chain Planning 12.1Oracle Advanced Supply Chain Planning 12.2Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5Oracle Communications Instant Messaging Server 10.0.1.5.0
9.8
CVSSv3

CVE-2022-23305

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows malicious users to manipulate the SQL by ent...
Apache Log4jNetapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4jOracle Advanced Supply Chain Planning 12.1Oracle Advanced Supply Chain Planning 12.2Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2024-51941CVE-2024-24417server-side request forgeryjd edwards enterpriseone toolsgooglehardcodedCVE-2025-21569weblogic serverIDORCVE-2024-24418CVE-2024-55591CVE-2024-49138peoplesoft enterprise cc common application objects
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook