Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle retail assortment planning 16.0.3 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3

CVE-2020-11979

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively n...
Apache Ant 1.10.8Gradle GradleFedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Agile Engineering Data Management 6.2.1.0Oracle Api Gateway 11.1.2.4.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.4.1Oracle Banking Platform 2.6.2Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1
6.1
CVSSv3

CVE-2019-17091

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J prior to 2.3.10 and Mojarra JavaServer Faces prior to 2.2.20, allows Reflected XSS because a client window field is mishandled.
Eclipse MojarraOracle Mojarra Javaserver FacesOracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Banking Enterprise Product Manufacturing 2.7.0Oracle Banking Enterprise Product Manufacturing 2.8.0Oracle Communications Diameter Signaling RouterOracle Communications Network Integrity 7.3.5Oracle Communications Network Integrity 7.3.6Oracle Communications Unified Inventory Management 7.3.0Oracle Communications Unified Inventory Management 7.4.0Oracle Enterprise Data Quality 12.2.1.3.0
6.5
CVSSv3

CVE-2019-3739

RSA BSAFE Crypto-J versions before 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.
Dell Bsafe Cert-jDell Bsafe Crypto-jDell Bsafe Ssl-jOracle Application Performance Management 13.3.0.0Oracle Application Performance Management 13.4.0.0Oracle Communications Network Integrity 7.3.2Oracle Communications Network Integrity 7.3.5Oracle Communications Network Integrity 7.3.6Oracle Database 12.1.0.2Oracle Database 12.2.0.1Oracle Database 18cOracle Database 19c
6.3
CVSSv3

CVE-2020-1945

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory bac...
Apache AntCanonical Ubuntu Linux 19.10Fedoraproject Fedora 31Fedoraproject Fedora 32Opensuse Leap 15.2Oracle Agile Engineering Data Management 6.2.1.0Oracle Banking Enterprise CollectionsOracle Banking Liquidity ManagementOracle Banking PlatformOracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Category Management Planning & Optimization 15.0.3
6.5
CVSSv3

CVE-2019-3738

RSA BSAFE Crypto-J versions before 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key.
Dell Bsafe Cert-jDell Bsafe Crypto-jDell Bsafe Ssl-jMcafee Threat Intelligence Exchange ServerMcafee Threat Intelligence Exchange Server 3.0.0Oracle Application Performance Management 13.3.0.0Oracle Application Performance Management 13.4.0.0Oracle Communications Network Integrity 7.3.2Oracle Communications Network Integrity 7.3.5Oracle Communications Network Integrity 7.3.6Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4
5.3
CVSSv3

CVE-2020-5397

Spring Framework, versions 5.2.x before 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable because preflight reques...
Vmware Spring FrameworkOracle Application Testing Suite 13.3.0.1Oracle Communications Brm - Elastic Charging Engine 11.3Oracle Communications Brm - Elastic Charging Engine 12.0Oracle Communications Diameter Signaling RouterOracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Policy Management 12.5.0Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1
6.5
CVSSv3

CVE-2019-3740

RSA BSAFE Crypto-J versions before 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.
Dell Bsafe Cert-jDell Bsafe Crypto-jDell Bsafe Ssl-jOracle Application Performance Management 13.3.0.0Oracle Application Performance Management 13.4.0.0Oracle Communications Network Integrity 7.3.2Oracle Communications Network Integrity 7.3.5Oracle Communications Network Integrity 7.3.6Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0
7.5
CVSSv3

CVE-2020-5398

In Spring Framework, versions 5.2.x before 5.2.3, versions 5.1.x before 5.1.13, and versions 5.0.x before 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attrib...
Vmware Spring FrameworkOracle Application Testing Suite 13.3.0.1Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Communications Cloud Native Core Policy 1.5.0Oracle Communications Diameter Signaling RouterOracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Policy Management 12.5.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0
7.8
CVSSv3

CVE-2021-22118

In Spring Framework, versions 5.2.x before 5.2.15 and versions 5.3.x before 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been upload...
Vmware Spring FrameworkOracle Commerce Guided Search 11.3.2Oracle Communications Brm - Elastic Charging Engine 12.0.0.3Oracle Communications Cloud Native Core Binding Support Function 1.9.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.6.0Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0Oracle Communications Cloud Native Core Unified Data Repository 1.14.0Oracle Communications Diameter Intelligence HubOracle Communications Element ManagerOracle Communications Interactive Session Recorder 6.4Oracle Communications Network Integrity 7.3.6
6.5
CVSSv3

CVE-2020-5421

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.
Vmware Spring FrameworkOracle Commerce Guided Search 11.3.2Oracle Communications Brm 11.3.0.9Oracle Communications Brm 12.0.0.3Oracle Communications Design Studio 7.3.4Oracle Communications Design Studio 7.3.5Oracle Communications Design Studio 7.4.0Oracle Communications Session Report ManagerOracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Endeca Information Discovery Integrator 3.2.0Oracle Enterprise Data Quality 12.2.1.3.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectCVE-2024-44852CVE-2024-3400CVE-2024-30129insecure direct object referenceCVE-2024-12115CVE-2024-11220CVE-2024-51378privilege escalation
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook