Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle primavera unifier 10.0 vulnerabilities and exploits

(subscribe to this query)
710
VMScore

CVE-2017-3501

Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.0, 10.1, 15.1 and 15.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network ...
Oracle Primavera Unifier 9.13Oracle Primavera Unifier 9.14Oracle Primavera Unifier 10.0Oracle Primavera Unifier 10.1Oracle Primavera Unifier 15.1Oracle Primavera Unifier 15.2
910
VMScore

CVE-2018-2620

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Platform). Supported versions that are affected are 10.x, 15.x, 16.x and 17.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...
Oracle Primavera Unifier 10.0Oracle Primavera Unifier 10.1Oracle Primavera Unifier 15.0Oracle Primavera Unifier 15.1Oracle Primavera Unifier 15.2Oracle Primavera Unifier 16.0Oracle Primavera Unifier 16.1Oracle Primavera Unifier 16.2Oracle Primavera Unifier 17.0
1000
VMScore

CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.
Linuxfoundation DojoOracle Communications Policy Management 12.6.0.0.0Oracle Primavera UnifierOracle Primavera Unifier 18.8Oracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Primavera Unifier 21.12Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Debian Debian Linux 10.0
1000
VMScore

CVE-2019-14540

A Polymorphic Typing issue exists in FasterXML jackson-databind prior to 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
Fasterxml Jackson-databindNetapp Oncommand Api Services -Netapp Oncommand Workflow Automation -Netapp Steelstore Cloud Integrated Storage -Fedoraproject Fedora 30Fedoraproject Fedora 31Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Oracle Banking Platform 2.4.0
1000
VMScore

CVE-2019-16942

A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, a...
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 30Fedoraproject Fedora 31Redhat Jboss Enterprise Application Platform 7.2.0Redhat Jboss Enterprise Application Platform 7.3Netapp Active Iq Unified ManagerNetapp Oncommand Api Services -Netapp Oncommand Workflow Automation -Netapp Service Level Manager -
850
VMScore

CVE-2020-36518

jackson-databind prior to 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
Fasterxml Jackson-databindOracle Big Data Spatial And GraphOracle Coherence 14.1.1.0.0Oracle Commerce Platform 11.3.0Oracle Commerce Platform 11.3.1Oracle Commerce Platform 11.3.2Oracle Communications Billing And Revenue ManagementOracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Network Repository Function 22.1.2Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.0
710
VMScore

CVE-2019-11358

jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Jquery JqueryDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Drupal DrupalBackdropcms BackdropFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Backports Sle 15.0Opensuse Leap 15.1Netapp Oncommand System Manager
470
VMScore

CVE-2020-9488

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
Apache Log4jOracle Communications Application Session Controller 3.9m0p1Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Communications Unified Inventory Management 7.3.0Oracle Communications Unified Inventory Management 7.4.0Oracle Data Integrator 12.2.1.3.0Oracle Data Integrator 12.2.1.4.0Oracle Enterprise Manager For Peoplesoft 13.4.1.1
690
VMScore

CVE-2021-45105

Apache Log4j2 versions 2.0-alpha1 up to and including 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted strin...
Apache Log4jNetapp Cloud Manager -Debian Debian Linux 10.0Debian Debian Linux 11.0Sonicwall Email SecuritySonicwall Network Security ManagerSonicwall Web Application FirewallSonicwall 6bk1602-0aa12-0tp0 FirmwareSonicwall 6bk1602-0aa22-0tp0 FirmwareSonicwall 6bk1602-0aa32-0tp0 FirmwareSonicwall 6bk1602-0aa42-0tp0 FirmwareSonicwall 6bk1602-0aa52-0tp0 Firmware
690
VMScore

CVE-2021-3449

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_ce...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Freebsd Freebsd 12.2Netapp Active Iq Unified Manager -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Performance Analyzer -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Ontap Select Deploy Administration Utility -Netapp Santricity Smi-s Provider -Netapp Snapcenter -
Preferred Score:
VMScore
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2024-53678CVE-2025-30742CVE-2025-1098appsmithorgmemory leakopen asset import libraryCVE-2025-27832CVE-2024-13731moxiemanager phpblind SQL injectionCVE-2025-1097validationtrend micro apex one
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook