oracle product lifecycle analytics 3.6.1 vulnerabilities and exploits

(subscribe to this query)

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

Apache Batik Fedoraproject Fedora 33 Fedoraproject Fedora 34 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Banking Apis 18.3 Oracle Banking Apis 19.1 Oracle Banking Apis 19.2 Oracle Banking Apis 20.1 Oracle Banking Apis 21.1 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2

1 Github repository

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulner...

Apache Xerces-j Oracle Agile Engineering Data Management 6.2.1.0 Oracle Agile Plm 9.3.6 Oracle Banking Deposits And Lines Of Credit Servicing 2.7 Oracle Banking Party Management 2.7.0 Oracle Communications Asap 7.3 Oracle Communications Element Manager Oracle Communications Session Report Manager Oracle Communications Session Route Manager Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Behavior Detection Platform Oracle Financial Services Behavior Detection Platform 8.1.1.0

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced N...

Oracle Advanced Networking Option 12.1.0.2 Oracle Advanced Networking Option 12.2.0.1 Oracle Advanced Networking Option 19c Oracle Agile Engineering Data Management 6.2.1.0 Oracle Agile Plm 9.3.6 Oracle Agile Product Lifecycle Management For Process 6.2.2.0 Oracle Agile Product Lifecycle Management For Process 6.2.3.0 Oracle Airlines Data Model 12.1.1.0.0 Oracle Airlines Data Model 12.2.0.1.0 Oracle Application Performance Management 13.4.1.0 Oracle Application Performance Management 13.5.1.0 Oracle Application Testing Suite 13.3.0.1

When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats ...

Apache Ant Oracle Agile Engineering Data Management 6.2.1.0 Oracle Agile Plm 9.3.6 Oracle Banking Trade Finance 14.5 Oracle Banking Treasury Management 14.5 Oracle Communications Cloud Native Core Automated Test Suite 1.9.0 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Oracle Communications Diameter Intelligence Hub Oracle Communications Order And Service Management 7.3 Oracle Communications Order And Service Management 7.4 Oracle Communications Unified Inventory Management 7.3.0 Oracle Communications Unified Inventory Management 7.4.0

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....

Vmware Spring Framework Cisco Cx Cloud Agent Oracle Communications Cloud Native Core Automated Test Suite 1.9.0 Oracle Communications Cloud Native Core Automated Test Suite 22.1.0 Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Console 22.1.0 Oracle Communications Cloud Native Core Network Exposure Function 22.1.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 22.1.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0

128 Github repositories7 Articles

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Redhat Hibernate Validator Redhat Hibernate Validator 6.1.0 Redhat Fuse 1.0 Redhat Jboss Data Grid -Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform 7.2 Redhat Jboss Enterprise Application Platform 7.3 Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Snapcenter Plug-in -

Apache Log4j2 versions 2.0-beta7 up to and including 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the tar...

Apache Log4j Apache Log4j 2.0 Oracle Communications Diameter Signaling Router Oracle Communications Interactive Session Recorder 6.3 Oracle Communications Interactive Session Recorder 6.4 Oracle Primavera Gateway Oracle Primavera Gateway 21.12.0 Oracle Primavera P6 Enterprise Project Portfolio Management Oracle Primavera P6 Enterprise Project Portfolio Management 21.12.0.0 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12

25 Github repositories4 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook