micros lucas vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the MICROS Lucas component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 2.9.5.6 and 2.9.5.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS Lu...

Oracle Micros Lucas 2.9.5.7 Oracle Micros Lucas 2.9.5.6

Spring Framework, versions 5.0.x before 5.0.7 and 4.3.x before 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for...

Vmware Spring Framework Oracle Flexcube Private Banking 2.2.0.1 Oracle Retail Xstore Point Of Service 7.1 Oracle Application Testing Suite 12.5.0.3 Oracle Hospitality Guest Access 4.2.0 Oracle Hospitality Guest Access 4.2.1 Oracle Weblogic Server 12.2.1.3.0 Oracle Enterprise Manager Ops Center 12.3.3 Oracle Endeca Information Discovery Integrator 3.2.0 Oracle Endeca Information Discovery Integrator 3.1.0 Oracle Agile Product Lifecycle Management 9.3.3 Oracle Agile Product Lifecycle Management 9.3.4 Oracle Agile Product Lifecycle Management 9.3.5 Oracle Application Testing Suite 13.1.0.1 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Communications Online Mediation Controller 6.1 Oracle Communications Services Gatekeeper Oracle Healthcare Master Person Index 3.0 Oracle Healthcare Master Person Index 4.0 Oracle Insurance Rules Palette 10.0 Oracle Insurance Rules Palette 10.2

Spring Framework (versions 5.0.x before 5.0.7, versions 4.3.x before 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the HiddenHttpMethodFilter in Spring MVC. If an application has a pre-e...

Vmware Spring Framework Oracle Retail Xstore Point Of Service 7.1 Oracle Weblogic Server 12.1.3.0.0 Oracle Application Testing Suite 12.5.0.3 Oracle Hospitality Guest Access 4.2.0 Oracle Hospitality Guest Access 4.2.1 Oracle Weblogic Server 10.3.6.0.0 Oracle Weblogic Server 12.2.1.3.0 Oracle Enterprise Manager Ops Center 12.3.3 Oracle Primavera P6 Enterprise Project Portfolio Management 18.8 Oracle Application Testing Suite 13.1.0.1 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Communications Diameter Signaling Router Oracle Communications Performance Intelligence Center Oracle Communications Services Gatekeeper Oracle Endeca Information Discovery Integrator 3.1.0 Oracle Endeca Information Discovery Integrator 3.2.0 Oracle Health Sciences Information Manager 3.0 Oracle Healthcare Master Person Index 3.0 Oracle Healthcare Master Person Index 4.0 Oracle Insurance Calculation Engine 10.2

1 Github repository

Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.

Pivotal Software Spring Security Vmware Spring Framework 5.0.5 Oracle Agile Plm 9.3.3 Oracle Agile Plm 9.3.4 Oracle Agile Plm 9.3.5 Oracle Agile Plm 9.3.6 Oracle Application Testing Suite 10.1 Oracle Application Testing Suite 12.5.0.3 Oracle Application Testing Suite 13.1.0.1 Oracle Application Testing Suite 13.2.0.1 Oracle Application Testing Suite 13.3.0.1 Oracle Big Data Discovery 1.6.0 Oracle Communications Converged Application Server Oracle Communications Diameter Signaling Router Oracle Communications Network Integrity Oracle Communications Performance Intelligence Center Oracle Communications Services Gatekeeper Oracle Endeca Information Discovery Integrator 3.1.0 Oracle Endeca Information Discovery Integrator 3.2.0 Oracle Enterprise Manager For Mysql Database 13.2 Oracle Enterprise Manager Ops Center 12.2.2 Oracle Enterprise Manager Ops Center 12.3.3

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook