Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle siebel core - automation vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3

CVE-2020-11612

The ZlibDecoders in Netty 4.1.x prior to 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.
Netty NettyDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 33Netapp Oncommand Api Services -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Oracle Communications Brm - Elastic Charging Engine 12.0.0.3Oracle Communications Cloud Native Core Service Communication Proxy 1.5.2Oracle Communications Design Studio 7.4.2Oracle Nosql DatabaseOracle Siebel Core - Server Framework
3.5
CVSSv3

CVE-2021-34428

For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this c...
Eclipse JettyDebian Debian Linux 10.0Netapp Active Iq Unified Manager -Netapp E-series Santricity Os ControllerNetapp E-series Santricity Web Services -Netapp Element Plug-in For Vcenter Server -Netapp Santricity Cloud Connector -Netapp Snap Creator Framework -Netapp Snapmanager -Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Communications Element Manager 8.2.2Oracle Communications Services Gatekeeper 7.0
7
CVSSv3

CVE-2020-27216

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creatin...
Eclipse JettyEclipse Jetty 10.0.0Eclipse Jetty 11.0.0Netapp Snap Creator Framework -Netapp Snapcenter -Netapp Vasa ProviderNetapp Virtual Storage ConsoleNetapp Storage Replication AdapterOracle Communications Application Session Controller 3.9m0p2Oracle Communications Converged Application Server - Service Controller 6.2Oracle Communications Element ManagerOracle Communications Offline Mediation Controller 12.0.0.3.0
4.8
CVSSv3

CVE-2020-27218

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request ...
Eclipse JettyEclipse Jetty 10.0.0Eclipse Jetty 11.0.0Netapp Oncommand System ManagerNetapp Snap Creator Framework -Oracle Blockchain PlatformOracle Communications Converged Application Server - Service Controller 6.2Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Communications Session Route ManagerOracle Flexcube Private Banking 12.0.0
7.5
CVSSv3

CVE-2021-28165

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
Eclipse JettyOracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Element Manager 8.2.2Oracle Communications Services Gatekeeper 7.0Oracle Communications Session Report ManagerOracle Communications Session Route ManagerOracle Rest Data ServicesOracle Siebel Core - AutomationJenkins JenkinsNetapp Cloud ManagerNetapp E-series Performance Analyzer
5.3
CVSSv3

CVE-2021-28164

In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web....
Eclipse Jetty 9.4.37Eclipse Jetty 9.4.38Netapp Cloud Manager -Netapp E-series Performance Analyzer -Netapp E-series Santricity Os ControllerNetapp E-series Santricity Web Services -Netapp Element Plug-in For Vcenter Server -Netapp Santricity Cloud Connector -Netapp Snapcenter -Netapp Snapcenter Plug-in -Netapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data Ontap
2.7
CVSSv3

CVE-2021-28163

In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that m...
Eclipse JettyEclipse Jetty 10.0.0Eclipse Jetty 10.0.1Eclipse Jetty 11.0.0Eclipse Jetty 11.0.1Fedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Apache IgniteApache Solr 8.8.1Netapp Cloud Manager -Netapp E-series Performance Analyzer -
9.8
CVSSv3

CVE-2019-16942

A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, a...
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 30Fedoraproject Fedora 31Redhat Jboss Enterprise Application Platform 7.2.0Redhat Jboss Enterprise Application Platform 7.3Netapp Active Iq Unified ManagerNetapp Oncommand Api Services -Netapp Oncommand Workflow Automation -Netapp Service Level Manager -
7.5
CVSSv3

CVE-2019-0227

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor t...
Apache Axis 1.4Oracle Agile Engineering Data Management 6.2.1.0Oracle Agile Product Lifecycle Management Framework 9.3.3Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Big Data Discovery 1.6Oracle Communications Asap Cartridges 7.2Oracle Communications Asap Cartridges 7.3Oracle Communications Design Studio 7.3.4.3.0Oracle Communications Design Studio 7.3.5.5.0Oracle Communications Design Studio 7.4.0.4.0Oracle Communications Design Studio 7.4.1.1.0
6.1
CVSSv3

CVE-2018-8032

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
Apache AxisOracle Agile Engineering Data Management 6.2.1.0Oracle Agile Product Lifecycle Management Framework 9.3.3Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Big Data Discovery 1.6Oracle Communications Asap Cartridges 7.2Oracle Communications Asap Cartridges 7.3Oracle Communications Design Studio 7.3.4.3.0Oracle Communications Design Studio 7.3.5.5.0Oracle Communications Design Studio 7.4.0.4.0Oracle Communications Design Studio 7.4.1.1.0
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-23629CVE-2024-52331CVE-2025-0693precious metals charts and widgets for wordpressneofixsimple downloads listCVE-2025-23544CVE-2025-21298client sidememory leakCVE-2019-5418XSSdeebot x5 pro plus
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook