oracle primavera unifier 18.8 vulnerabilities and exploits

(subscribe to this query)

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.

Fasterxml Jackson-databind Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Banking Platform 2.5.0 Oracle Banking Platform 2.6.0 Oracle Banking Platform 2.6.1 Oracle Banking Platform 2.6.2 Oracle Business Process Management Suite 12.1.3.0.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Communications Billing And Revenue Management 7.5 Oracle Communications Billing And Revenue Management 12.0 Oracle Communications Instant Messaging Server 10.0.1.3.0

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms).

Fasterxml Jackson-databind Debian Debian Linux 8.0 Netapp Steelstore Cloud Integrated Storage -Oracle Agile Plm 9.3.6 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Banking Platform

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Debian Debian Linux 8.0 Oracle Agile Plm 9.3.6 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Banking Platform

1 Github repository

SubTypeValidator.java in FasterXML jackson-databind prior to 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.

Fasterxml Jackson-databind Debian Debian Linux 8.0 Netapp Active Iq Unified Manager Netapp Oncommand Workflow Automation -Netapp Service Level Manager -Netapp Snapcenter -Fedoraproject Fedora 29 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Redhat Jboss Enterprise Application Platform 7.2 Redhat Jboss Enterprise Application Platform 7.3 Redhat Openshift Container Platform 4.1

1 Github repository

Lodash versions before 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.

Lodash Lodash Oracle Banking Corporate Lending Process Management 14.2.0 Oracle Banking Corporate Lending Process Management 14.3.0 Oracle Banking Corporate Lending Process Management 14.5.0 Oracle Banking Credit Facilities Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.3.0 Oracle Banking Credit Facilities Process Management 14.5.0 Oracle Banking Extensibility Workbench 14.2.0 Oracle Banking Extensibility Workbench 14.3.0 Oracle Banking Extensibility Workbench 14.5.0 Oracle Banking Supply Chain Finance 14.2.0 Oracle Banking Supply Chain Finance 14.3.0

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.2 lacks certain net.sf.ehcache blocking.

Fasterxml Jackson-databind Oracle Banking Platform Oracle Communications Billing And Revenue Management 7.5.0.23.0 Oracle Communications Billing And Revenue Management 12.0.0.3.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1 Oracle Communications Contacts Server 8.0.0.4.0 Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Network Charging And Control Oracle Communications Network Charging And Control 6.0.1 Oracle Customer Management And Segmentation Foundation 18.0 Oracle Enterprise Manager Base Platform 13.3.0.0

A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, a...

Fasterxml Jackson-databind Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Redhat Jboss Enterprise Application Platform 7.2.0 Redhat Jboss Enterprise Application Platform 7.3 Netapp Active Iq Unified Manager Netapp Oncommand Api Services -Netapp Oncommand Workflow Automation -Netapp Service Level Manager -

2 Github repositories

Lodash versions before 4.17.21 are vulnerable to Command Injection via the template function.

Lodash Lodash Oracle Banking Corporate Lending Process Management 14.2.0 Oracle Banking Corporate Lending Process Management 14.3.0 Oracle Banking Corporate Lending Process Management 14.5.0 Oracle Banking Credit Facilities Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.3.0 Oracle Banking Credit Facilities Process Management 14.5.0 Oracle Banking Extensibility Workbench 14.2.0 Oracle Banking Extensibility Workbench 14.3.0 Oracle Banking Extensibility Workbench 14.5.0 Oracle Banking Supply Chain Finance 14.2.0 Oracle Banking Supply Chain Finance 14.3.0

6 Github repositories

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

Apache Pdfbox Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Oracle Banking Corporate Lending Process Management 14.2.0 Oracle Banking Corporate Lending Process Management 14.3.0 Oracle Banking Corporate Lending Process Management 14.5.0 Oracle Banking Credit Facilities Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.3.0 Oracle Banking Credit Facilities Process Management 14.5.0 Oracle Banking Supply Chain Finance 14.2.0 Oracle Banking Supply Chain Finance 14.3.0

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an malicious user to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Pro...

Apache Poi Oracle Application Testing Suite 12.5.0.3 Oracle Application Testing Suite 13.1.0.1 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Banking Enterprise Originations 2.7.0 Oracle Banking Enterprise Originations 2.8.0 Oracle Banking Enterprise Product Manufacturing 2.7.0 Oracle Banking Enterprise Product Manufacturing 2.8.0 Oracle Banking Payments 14.0.0 Oracle Banking Payments 14.1.0 Oracle Banking Platform 2.4.0

« PREV 1 2 3 4 5 6 7 8 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook