Latest oracle banking enterprise default management Vulnerabilities

● CVE-2021-45105

Apache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el8ea

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el7ea

redhat/rh-sso7-keycloak<0:15.0.6-1.redhat_00001.1.el7

redhat/rh-sso7-keycloak<0:15.0.6-1.redhat_00001.1.el8

debian/apache-log4j2

debian/apache-log4j2<=2.16.0-1~deb10u1<=2.16.0-1<=2.16.0-1~deb11u1

and 217 more

● CVE-2021-2351

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unau...

Oracle Advanced Networking Option=12.1.0.2

Oracle Advanced Networking Option=12.2.0.1

Oracle Advanced Networking Option=19c

Oracle Agile Engineering Data Management=6.2.1.0

Oracle Agile PLM=9.3.6

Oracle Agile Product Lifecycle Management for Process=6.2.2.0

and 242 more

● CVE-2021-35043

OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for...

Antisamy Project Antisamy<1.6.4

Oracle Retail Back Office=14.0

Oracle Retail Back Office=14.1

Oracle Retail Central Office=14.0

Oracle Retail Central Office=14.1

Oracle Retail Returns Management=14.0

and 23 more

● CVE-2021-35517

A flaw was found in apache-commons-compress. When reading a specially crafted TAR archive, Compress can allocate large amounts of memory that leads to an out-of-memory error for small inputs. This fla...

redhat/apache-commons-compress<0:1.21-1.2.el8e

redhat/apache-commons-compress<1.21

Apache Commons Compress>=1.1<=1.20

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vmware Vsphere

Netapp Active Iq Unified Manager Windows

and 50 more

● CVE-2021-36090

A flaw was found in apache-commons-compress. When reading a specially crafted ZIP archive, Compress can allocate large amounts of memory that leads to an out-of-memory error for small inputs. This fla...

redhat/apache-commons-compress<0:1.21-1.2.el8e

IBM Cloud Pak System<=V2.3.0 - V2.3.3.3 Interim Fix 1

redhat/apache-commons-compress<1.21

Apache Commons Compress>=1.0<1.21

Oracle Banking Apis>=18.1<=18.3

Oracle Banking Apis=19.1

and 69 more

● CVE-2021-35515

A flaw was found in apache-commons-compress. When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This flaw allo...

redhat/apache-commons-compress<0:1.21-1.2.el8e

redhat/apache-commons-compress<1.21

Apache Commons Compress>=1.6<=1.20

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vmware Vsphere

Netapp Active Iq Unified Manager Windows

and 43 more

● CVE-2021-35516

A flaw was found in apache-commons-compress. When reading a specially crafted 7Z archive, Compress can allocate large amounts of memory that leads to an out-of-memory error for very small inputs. This...

redhat/apache-commons-compress<0:1.21-1.2.el8e

redhat/apache-commons-compress<1.21

Apache Commons Compress>=1.6<=1.20

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vmware Vsphere

Netapp Active Iq Unified Manager Windows

and 43 more

● CVE-2021-29425

Apache Commons IO could allow a remote attacker to traverse directories on the system, caused by improper input validation by the FileNameUtils.normalize method. An attacker could send a specially-cra...

redhat/eap7-apache-commons-io<0:2.10.0-1.redhat_00001.1.el6ea

redhat/eap7-hal-console<0:3.2.16-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.20-4.SP2_redhat_00001.1.el6ea

redhat/eap7-ironjacamar<0:1.4.35-1.Final_redhat_00001.1.el6ea

redhat/eap7-jakarta-el<0:3.0.3-2.redhat_00006.1.el6ea

redhat/eap7-jberet<0:1.3.9-1.Final_redhat_00001.1.el6ea

and 185 more

● CVE-2021-21346

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code fr...

redhat/xstream<0:1.3.1-13.el7_9

debian/libxstream-java

redhat/xstream<1.4.16

Xstream Project Xstream<1.4.16

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 33 more

● CVE-2021-21347

redhat/xstream<0:1.3.1-13.el7_9

debian/libxstream-java

redhat/xstream<1.4.16

Xstream Project Xstream<1.4.16

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 34 more

● CVE-2021-21345

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute ...

redhat/xstream<0:1.3.1-13.el7_9

debian/libxstream-java

redhat/xstream<1.4.16

Xstream Project Xstream<1.4.16

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 32 more

● CVE-2021-21344

redhat/xstream<0:1.3.1-13.el7_9

debian/libxstream-java

redhat/xstream<1.4.16

Xstream Project Xstream<1.4.16

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 32 more

● CVE-2021-21348

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maxi...

debian/libxstream-java

redhat/xstream<1.4.16

Xstream Project Xstream<1.4.16

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Debian Debian Linux=11.0

and 30 more

● CVE-2021-21351

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a r...

debian/libxstream-java

redhat/xstream<1.4.16

Xstream Project Xstream<1.4.16

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Debian Debian Linux=11.0

and 30 more

● CVE-2021-21343

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type informat...

debian/libxstream-java

redhat/xstream<1.4.16

Xstream Project Xstream<1.4.16

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Debian Debian Linux=11.0

and 29 more

● CVE-2021-21342

Xstream Project Xstream<1.4.16

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Debian Debian Linux=11.0

Fedoraproject Fedora=33

Fedoraproject Fedora=34

and 28 more

● CVE-2021-21349

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resourc...

debian/libxstream-java

redhat/xstream<1.4.16

Xstream Project Xstream<1.4.16

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Debian Debian Linux=11.0

and 33 more

● CVE-2021-21341

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target...

debian/libxstream-java

redhat/xstream<1.4.16

Xstream Project Xstream<1.4.16

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Debian Debian Linux=11.0

and 25 more

● CVE-2021-21350

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to execute arbitrary code only by man...

redhat/xstream<0:1.3.1-13.el7_9

debian/libxstream-java

redhat/xstream<1.4.16

Xstream Project Xstream<1.4.16

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 34 more

● CVE-2020-13936

Apache Velocity could allow a remote attacker to execute arbitrary code on the system, caused by a sandbox bypass flaw. By modifying the Velocity templates, an attacker could exploit this vulnerabilit...

ubuntu/velocity<1.7-5ubuntu0.18.04.1~

ubuntu/velocity<1.7-5+

ubuntu/velocity<1.7-4ubuntu0.1~

debian/velocity

redhat/eap7-artemis-wildfly-integration<0:1.0.4-1.redhat_00001.1.el6ea

redhat/eap7-bouncycastle<0:1.68.0-2.redhat_00005.1.el6ea

and 89 more

● CVE-2020-9281

A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with th...

Ckeditor Ckeditor>=4.0<4.14

Fedoraproject Fedora=30

Fedoraproject Fedora=31

Fedoraproject Fedora=32

Drupal Drupal>=8.7.0<8.7.12

Drupal Drupal>=8.8.0<8.8.4

and 20 more

● CVE-2020-6950

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

redhat/glassfish-jsf-impl<2.3.14

redhat/glassfish-jsf-impl<3.0.0

redhat/eap7-dom4j<0:2.1.3-1.redhat_00001.1.el6ea

redhat/eap7-elytron-web<0:1.2.5-1.Final_redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-13.SP3_redhat_00011.1.el6ea

redhat/eap7-hal-console<0:3.0.23-1.Final_redhat_00001.1.el6ea

and 234 more

● CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This...

redhat/eap7-apache-cxf<0:3.2.11-1.redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-6.SP3_redhat_00004.1.el6ea

redhat/eap7-hal-console<0:3.0.19-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.14-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.18-1.Final_redhat_00001.1.el6ea

redhat/eap7-jackson-annotations<0:2.9.10-1.redhat_00003.1.el6ea

and 795 more

Latest oracle banking enterprise default management Vulnerabilities

Company

Resources

Contact