Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle business intelligence 5.9.0.0.0 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2

CVE-2020-13954

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack via the styleSheetPath, which allows a malicious actor to inject javascript into the web...
Apache CxfNetapp Snap Creator Framework -Netapp Vasa Provider For Clustered Data OntapOracle Business Intelligence 5.5.0.0.0Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Retail Order Broker Cloud Service 15.0Oracle Communications Messaging Server 8.0.2Oracle Communications Messaging Server 8.1
4.3
CVSSv2

CVE-2021-23839

OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS ve...
Openssl OpensslOracle Business Intelligence 5.5.0.0.0Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Enterprise Manager For Storage Management 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Graalvm 19.3.5Oracle Graalvm 20.3.1.2Oracle Graalvm 21.0.0.2Oracle Jd Edwards World Security A9.4Oracle Zfs Storage Appliance Kit 8.8
5
CVSSv2

CVE-2019-17566

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET reques...
Apache BatikOracle Api Gateway 11.1.2.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Communications Application Session Controller 3.9m0p2Oracle Communications Metasolv SolutionOracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Enterprise Repository 11.1.1.7.0Oracle Financial Services Analytical Applications InfrastructureOracle Fusion Middleware Mapviewer 12.2.1.4.0
5
CVSSv2

CVE-2021-23840

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be...
Openssl OpensslDebian Debian Linux 10.0Tenable Log Correlation EngineTenable Nessus Network Monitor 5.11.0Tenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Oracle Business Intelligence 5.5.0.0.0Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0
4.3
CVSSv2

CVE-2021-23841

The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (whi...
Openssl OpensslDebian Debian Linux 10.0Tenable Nessus Network Monitor 5.11.0Tenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Tenable.scApple SafariApple IpadosApple Iphone OsApple Macos
9
CVSSv2

CVE-2022-23307

CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
Apache ChainsawApache Log4jQos Reload4jOracle Advanced Supply Chain Planning 12.1Oracle Advanced Supply Chain Planning 12.2Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5Oracle Communications Instant Messaging Server 10.0.1.5.0
6
CVSSv2

CVE-2022-23302

JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBi...
Apache Log4jNetapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4jOracle Advanced Supply Chain Planning 12.1Oracle Advanced Supply Chain Planning 12.2Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5
6.8
CVSSv2

CVE-2022-23305

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows malicious users to manipulate the SQL by ent...
Apache Log4jNetapp Snapmanager -Broadcom Brocade Sannav -Qos Reload4jOracle Advanced Supply Chain Planning 12.1Oracle Advanced Supply Chain Planning 12.2Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5
4.3
CVSSv2

CVE-2020-1971

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This functi...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Api Gateway 11.1.2.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Diameter Intelligence Hub
6
CVSSv2

CVE-2021-4104

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests t...
Apache Log4j 1.2Fedoraproject Fedora 35Redhat Codeready Studio 12.0Redhat Integration Camel K -Redhat Integration Camel Quarkus -Redhat Jboss A-mq 6.0.0Redhat Jboss A-mq 7Redhat Jboss A-mq Streaming -Redhat Jboss Data Grid 7.0.0Redhat Jboss Data Virtualization 6.0.0Redhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Enterprise Application Platform 7.0
Preferred Score:
CVSSv2
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-0001CVE-2025-1378CVE-2025-24200waymarkimagemetainjectnuuofirewallCVE-2025-1094CVE-2025-1372hard-codedCVE-2025-1368libarchive
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook