oracle primavera unifier 18.8 vulnerabilities and exploits

(subscribe to this query)

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).

Fasterxml Jackson-databind Debian Debian Linux 8.0 Netapp Active Iq Unified Manager Netapp Steelstore Cloud Integrated Storage -Oracle Banking Platform Oracle Communications Contacts Server 8.0.0.4.0 Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Network Charging And Control Oracle Communications Network Charging And Control 6.0.1 Oracle Enterprise Manager Base Platform 13.3.0.0 Oracle Enterprise Manager Base Platform 13.4.0.0

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Debian Debian Linux 8.0 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Platform Oracle Communications Contacts Server 8.0.0.4.0 Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Network Charging And Control Oracle Communications Network Charging And Control 6.0.1 Oracle Enterprise Manager Base Platform 13.3.0.0 Oracle Enterprise Manager Base Platform 13.4.0.0

2 Github repositories

A Polymorphic Typing issue exists in FasterXML jackson-databind prior to 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

Fasterxml Jackson-databind Netapp Oncommand Api Services -Netapp Oncommand Workflow Automation -Netapp Steelstore Cloud Integrated Storage -Fedoraproject Fedora 30 Fedoraproject Fedora 31 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Redhat Jboss Enterprise Application Platform 7.2 Redhat Jboss Enterprise Application Platform 7.3 Oracle Banking Platform 2.4.0

2 Github repositories

Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some context...

Apache Groovy Apache Groovy 4.0.0 Netapp Snapcenter -Oracle Agile Engineering Data Management 6.2.1.0 Oracle Agile Plm 9.3.3 Oracle Agile Plm 9.3.6 Oracle Agile Plm Mcad Connector 3.4 Oracle Agile Plm Mcad Connector 3.6 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Communications Brm - Elastic Charging Engine 11.3.0.9.0 Oracle Communications Brm - Elastic Charging Engine 12.0.0.3

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).

Fasterxml Jackson-databind Debian Debian Linux 8.0 Netapp Active Iq Unified Manager Netapp Steelstore Cloud Integrated Storage -Oracle Agile Plm 9.3.6 Oracle Banking Platform Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option...

Jqueryui Jquery Ui Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.

Fasterxml Jackson-databind Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Banking Platform 2.5.0 Oracle Banking Platform 2.6.0 Oracle Banking Platform 2.6.1 Oracle Banking Platform 2.6.2 Oracle Business Process Management Suite 12.1.3.0.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Clusterware 12.1.0.2.0 Oracle Communications Billing And Revenue Management 7.5 Oracle Communications Billing And Revenue Management 12.0

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

Apache Pdfbox Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Oracle Banking Trade Finance Process Management 14.2.0 Oracle Banking Trade Finance Process Management 14.3.0 Oracle Banking Trade Finance Process Management 14.5.0 Oracle Banking Treasury Management 14.5 Oracle Banking Virtual Account Management 14.2.0 Oracle Banking Virtual Account Management 14.3.0 Oracle Banking Virtual Account Management 14.5.0 Oracle Communications Session Report Manager

FasterXML jackson-databind 2.x prior to 2.9.7 might allow malicious users to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.

Fasterxml Jackson-databind Fasterxml Jackson-databind 2.7.0 Fasterxml Jackson-databind 2.8.0 Fasterxml Jackson-databind 2.9.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Banking Platform 2.5.0 Oracle Banking Platform 2.6.0 Oracle Banking Platform 2.6.1 Oracle Banking Platform 2.6.2 Oracle Communications Billing And Revenue Management 7.5 Oracle Communications Billing And Revenue Management 12.0

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.

Fasterxml Jackson-databind Fasterxml Jackson-databind 2.7.0 Fasterxml Jackson-databind 2.8.0 Fasterxml Jackson-databind 2.9.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Banking Platform 2.5.0 Oracle Banking Platform 2.6.0 Oracle Banking Platform 2.6.1 Oracle Banking Platform 2.6.2 Oracle Communications Billing And Revenue Management 7.5 Oracle Communications Billing And Revenue Management 12.0

« PREV 1 2 3 4 5 6 7 8 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook