Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle storagetek tape analytics sw tool 2.3 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2

CVE-2015-4852

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote malicious users to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core....
Oracle Virtual Desktop InfrastructureOracle Storagetek Tape Analytics Sw Tool 2.3Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.1.2.0.0Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 12.2.1.0.0
7.5
CVSSv2

CVE-2019-2725

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com...
Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.4Oracle Agile Plm 9.3.5Oracle Communications Converged Application Server 5.1Oracle Communications Converged Application Server 7.0Oracle Communications Converged Application Server 7.1Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Storagetek Tape Analytics Sw Tool 2.3Oracle Tape Library Acsls 8.5Oracle Tape Virtual Storage Manager Gui 6.2
7.5
CVSSv2

CVE-2019-2729

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
Oracle Communications Diameter Signaling Router 8.0Oracle Communications Diameter Signaling Router 8.1Oracle Communications Diameter Signaling Router 8.2Oracle Communications Diameter Signaling Router 8.2.1Oracle Communications Network IntegrityOracle Hyperion Infrastructure Technology 11.1.2.4Oracle Hyperion Infrastructure Technology 11.2.5.0Oracle Identity Manager 11.1.2.3.0Oracle Identity Manager 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58
4.3
CVSSv2

CVE-2019-3739

RSA BSAFE Crypto-J versions before 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.
Dell Bsafe Cert-jDell Bsafe Crypto-jDell Bsafe Ssl-jOracle Application Performance Management 13.3.0.0Oracle Application Performance Management 13.4.0.0Oracle Communications Network Integrity 7.3.2Oracle Communications Network Integrity 7.3.5Oracle Communications Network Integrity 7.3.6Oracle Database 12.1.0.2Oracle Database 12.2.0.1Oracle Database 18cOracle Database 19c
4.3
CVSSv2

CVE-2019-3740

RSA BSAFE Crypto-J versions before 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.
Dell Bsafe Cert-jDell Bsafe Crypto-jDell Bsafe Ssl-jOracle Application Performance Management 13.3.0.0Oracle Application Performance Management 13.4.0.0Oracle Communications Network Integrity 7.3.2Oracle Communications Network Integrity 7.3.5Oracle Communications Network Integrity 7.3.6Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0
4.3
CVSSv2

CVE-2019-3738

RSA BSAFE Crypto-J versions before 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two parties into computing the same predictable shared key.
Dell Bsafe Cert-jDell Bsafe Crypto-jDell Bsafe Ssl-jMcafee Threat Intelligence Exchange ServerMcafee Threat Intelligence Exchange Server 3.0.0Oracle Application Performance Management 13.3.0.0Oracle Application Performance Management 13.4.0.0Oracle Communications Network Integrity 7.3.2Oracle Communications Network Integrity 7.3.5Oracle Communications Network Integrity 7.3.6Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4
3.6
CVSSv2

CVE-2020-5421

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.
Vmware Spring FrameworkOracle Commerce Guided Search 11.3.2Oracle Communications Brm 11.3.0.9Oracle Communications Brm 12.0.0.3Oracle Communications Design Studio 7.3.4Oracle Communications Design Studio 7.3.5Oracle Communications Design Studio 7.4.0Oracle Communications Session Report ManagerOracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Endeca Information Discovery Integrator 3.2.0Oracle Enterprise Data Quality 12.2.1.3.0
7.5
CVSSv2

CVE-2020-10683

dom4j prior to 2.0.3 and 2.1.x prior to 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j...
Dom4j Project Dom4jOracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5Oracle Application Testing Suite 13.3.0.1Oracle Banking PlatformOracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Application Session Controller 3.9m0p1Oracle Communications Diameter Signaling RouterOracle Communications Unified Inventory Management 7.3.0Oracle Communications Unified Inventory Management 7.4.0Oracle Data Integrator 12.2.1.3.0
Preferred Score:
CVSSv2
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-0575CVE-2024-55591CVE-2024-41742com.transsion.carlcareCVE-2024-57926code injectionCVE-2024-12365tendainsecure direct object referenceCVE-2024-13433tduck-platformcode-projectsXML injection
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook