Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle webcenter portal 12.2.1.4.0 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv3

CVE-2020-14552

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access vi...
Oracle Webcenter Portal 11.1.1.9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0
8.6
CVSSv3

CVE-2020-14611

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ...
Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0
4.4
CVSSv3

CVE-2024-20992

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Content integration). The supported version that is affected is 12.2.1.4.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Or...
Oracle Webcenter Portal 12.2.1.4.0
5.5
CVSSv3

CVE-2021-28657

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.
Apache TikaOracle Healthcare Foundation 7.3.0Oracle Healthcare Foundation 8.0.0Oracle Healthcare Foundation 8.1.0Oracle Primavera UnifierOracle Primavera Unifier 18.8Oracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Messaging Server 8.1
5.5
CVSSv3

CVE-2020-9489

A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache...
Apache Tika 1.24Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0Oracle Primavera UnifierOracle Primavera Unifier 16.1Oracle Primavera Unifier 16.2Oracle Primavera Unifier 18.8Oracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Messaging Server 8.1
7.5
CVSSv3

CVE-2019-17359

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.63Apache Tomee 7.0.7Apache Tomee 7.1.2Apache Tomee 8.0.1Netapp Active Iq Unified ManagerNetapp Oncommand Api Services -Netapp Oncommand Workflow Automation -Netapp Service Level Manager -Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications ConvergenceOracle Communications Diameter Signaling Router
9.8
CVSSv3

CVE-2020-2555

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with net...
Oracle Access Manager 11.1.2.3.0Oracle Coherence 3.7.1.0Oracle Coherence 12.1.3.0.0Oracle Coherence 12.2.1.3.0Oracle Coherence 12.2.1.4.0Oracle Commerce PlatformOracle Commerce Platform 11.0.0Oracle Commerce Platform 11.1.0Oracle Commerce Platform 11.2.0Oracle Communications Diameter Signaling RouterOracle Healthcare Data Repository 7.0.1Oracle Rapid Planning 12.1
9.8
CVSSv3

CVE-2019-10173

It was found that xstream API version 1.4.10 prior to 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote malicious user to run arbitrary shell commands when unmarshalling XML or any support...
Xstream Project Xstream 1.4.10Oracle Banking PlatformOracle Banking Platform 2.4.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3.0.9.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0Oracle Communications Diameter Signaling RouterOracle Communications Unified Inventory Management 7.3.0
7.5
CVSSv3

CVE-2020-11612

The ZlibDecoders in Netty 4.1.x prior to 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.
Netty NettyDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 33Netapp Oncommand Api Services -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Oracle Communications Brm - Elastic Charging Engine 12.0.0.3Oracle Communications Cloud Native Core Service Communication Proxy 1.5.2Oracle Communications Design Studio 7.4.2Oracle Nosql DatabaseOracle Siebel Core - Server Framework
6.1
CVSSv3

CVE-2020-9281

A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 prior to 4.14 allows remote malicious users to inject arbitrary web script through a crafted "protected" comment (with the cke_protected syntax).
Ckeditor CkeditorFedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Drupal DrupalOracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Application ExpressOracle Jd Edwards Enterpriseone ToolsOracle Peoplesoft Enterprise Peopletools -Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Peoplesoft Enterprise Peopletools 8.57
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2024-51941CVE-2024-24417server-side request forgeryjd edwards enterpriseone toolsgooglehardcodedCVE-2025-21569weblogic serverIDORCVE-2024-24418CVE-2024-55591CVE-2024-49138peoplesoft enterprise cc common application objects
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook