Latest oracle banking trade finance process management Vulnerabilities

● CVE-2022-21474

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vu...

Oracle Banking Trade Finance Process Management=14.5

● CVE-2022-22963

VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

VMware Tanzu Spring Cloud

Vmware Spring Cloud Function<=3.1.6

Vmware Spring Cloud Function>=3.2.0<=3.2.2

Oracle Banking Branch=14.5

Oracle Banking Cash Management=14.5

Oracle Banking Corporate Lending Process Management=14.5

and 42 more

● CVE-2021-41973

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer an...

Apache MINA<2.0.22

Apache MINA>=2.1.0<2.1.5

Oracle Banking Payments=14.5

Oracle Banking Trade Finance Process Management=14.5

Oracle Banking Treasury Management=14.5

Oracle Communications Cloud Native Core Console=1.9.0

and 8 more

● CVE-2021-29505

XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the...

redhat/xstream<0:1.3.1-14.el7_9

debian/libxstream-java

redhat/xstream<1.4.17

Xstream Project Xstream<1.4.17

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 37 more

● CVE-2021-21409

### Impact The content-length header is not correctly validated if the request only use a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request...

maven/io.netty:netty<4.0.0

maven/org.jboss.netty:netty<4.0.0

maven/io.netty:netty-codec-http2>=4.0.0<4.1.61.Final

redhat/qpid-proton<0:0.33.0-6.el7_9

redhat/qpid-proton<0:0.33.0-8.el8

redhat/eap7-elytron-web<0:1.6.3-1.Final_redhat_00001.1.el6ea

and 75 more

● CVE-2021-27807

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

redhat/pdfbox<2.0.23

Apache PDFBox>=2.0.0<=2.0.22

Fedoraproject Fedora=32

Fedoraproject Fedora=33

Fedoraproject Fedora=34

Oracle Banking Trade Finance Process Management=14.2.0

and 26 more

● CVE-2021-27906

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

redhat/pdfbox<2.0.23

Apache PDFBox>=2.0.0<=2.0.22

Fedoraproject Fedora=32

Fedoraproject Fedora=33

Fedoraproject Fedora=34

Oracle Banking Corporate Lending Process Management=14.2.0

and 37 more

● CVE-2021-23337

`lodash` versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

redhat/cockpit-ovirt<0:0.15.1-2.el8e

redhat/ovirt-engine-ui-extensions<0:1.2.6-1.el8e

redhat/ovirt-web-ui<0:1.6.9-1.el8e

redhat/nodejs-lodash<4.17.21

npm/lodash-template<=1.0.0

npm/lodash.template<=4.5.0

and 50 more

● CVE-2020-28500

A flaw was found in nodejs-lodash. A Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions is possible.

redhat/cockpit-ovirt<0:0.15.1-2.el8e

redhat/ovirt-engine-ui-extensions<0:1.2.6-1.el8e

redhat/ovirt-web-ui<0:1.6.9-1.el8e

npm/lodash.trim<=4.5.1

npm/lodash.trimend<=4.5.1

npm/lodash-es<4.17.21

and 44 more

● CVE-2021-21290

### Impact When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. The CVSSv3.1 ...

maven/io.netty:netty<4.0.0

maven/org.jboss.netty:netty<4.0.0

maven/io.netty:netty-codec-http>=4.0.0<4.1.59.Final

redhat/qpid-proton<0:0.33.0-6.el7_9

redhat/qpid-proton<0:0.33.0-8.el8

redhat/eap7-artemis-wildfly-integration<0:1.0.4-1.redhat_00001.1.el6ea

and 91 more

● CVE-2020-26217

XStream could allow a remote attacker to execute arbitrary code on the system, caused by flaws in the XStream.java and SecurityVulnerabilityTest.java scripts. By manipulating the processed input strea...

redhat/xstream<0:1.3.1-12.el7_9

debian/libxstream-java

IBM RDNG<=6.0.2

IBM DOORS Next<=7.0

IBM DOORS Next<=7.0.1

IBM DOORS Next<=7.0.2

and 56 more

● CVE-2020-8203

A flaw was found in nodejs-lodash in versions 4.17.15 and earlier. A prototype pollution attack is possible which can lead to arbitrary code execution. The primary threat from this vulnerability is to...

redhat/kiali<0:v1.12.10.redhat2-1.el7

redhat/ior<0:1.1.6-1.el8

redhat/servicemesh<0:1.1.6-1.el8

redhat/servicemesh-cni<0:1.1.6-1.el8

redhat/servicemesh-grafana<0:6.4.3-13.el8

redhat/servicemesh-operator<0:1.1.6-2.el8

and 54 more

● CVE-2019-12399

Apache Kafka could allow a remote attacker to obtain sensitive information, caused by a flaw in the Connect REST API. By sending specially crafted request, a remote attacker could exploit this vulnera...

IBM Initial Release<=2.0

IBM Security Guardium Insights<=2.0.1

redhat/kafka<2.0.2

redhat/kafka<2.1.2

redhat/kafka<2.2.2

and 28 more

● CVE-2019-0228

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.

Apache PDFBox=2.0.14

Apache James=3.3.0

Apache James=3.4.0

Fedoraproject Fedora=29

Fedoraproject Fedora=30

Oracle Banking Corporate Lending Process Management=14.2

and 26 more

Latest oracle banking trade finance process management Vulnerabilities

Company

Resources

Contact