Latest oracle essbase Vulnerabilities

● CVE-2023-22010

Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4.3.0.0. Difficult to exploit vulnerability allows high privileged attacker with ...

Oracle Essbase=21.4.3.0.0

● CVE-2023-21944

Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4. Difficult to exploit vulnerability allows unauthenticated attacker with networ...

Oracle Essbase=21.4

● CVE-2023-21942

Oracle Essbase=21.4

● CVE-2023-21943

Oracle Essbase=21.4

● CVE-2022-21508

Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.3. Easily exploitable vulnerability allows high privileged attacker with logon to t...

Oracle Essbase=21.3

● CVE-2021-3712

OpenSSL could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read when processing ASN.1 strings. By sending specially crafted data, an attacker could exploit this ...

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 79 more

● CVE-2021-3711

OpenSSL is vulnerable to a buffer overflow, caused by improper bounds checking by the EVP_PKEY_decrypt() function within implementation of the SM2 decryption. By sending specially crafted SM2 content,...

debian/openssl

redhat/openssl<1.1.1

IBM Cognos Analytics<=12.0.0-12.0.1

IBM Cognos Analytics<=11.2.0-11.2.4 FP2

IBM Cognos Analytics<=11.1.1-11.1.7 FP7

OpenSSL OpenSSL>=1.1.1<1.1.1l

and 41 more

● CVE-2021-22897

curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The se...

Haxx Curl>=7.61.0<=7.76.1

Oracle Communications Cloud Native Core Binding Support Function=1.11.0

Oracle Communications Cloud Native Core Network Function Cloud Native Environment=1.10.0

Oracle Communications Cloud Native Core Network Repository Function=1.15.0

Oracle Communications Cloud Native Core Network Repository Function=1.15.1

Oracle Communications Cloud Native Core Network Slice Selection Function=1.8.0

and 45 more

● CVE-2021-22898

cURL libcurl could allow a remote attacker to obtain sensitive information, caused by a flaw in the option parser for sending NEW_ENV variables. By sending a specially-crafted request using a clear-te...

redhat/curl<0:7.61.1-22.el8

debian/curl<=7.64.0-4+deb10u2

debian/curl<=7.74.0-1.2<=7.64.0-4<=7.64.0-4+deb10u2<=7.64.0-4+deb10u1

Haxx Curl>=7.7<=7.76.1

Debian Debian Linux=9.0

Fedoraproject Fedora=33

and 19 more

● CVE-2021-22901

A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was pe...

redhat/jbcs-httpd24<0:1-18.el8

redhat/jbcs-httpd24-apr<0:1.6.3-105.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-82.el8

redhat/jbcs-httpd24-brotli<0:1.0.6-40.el8

redhat/jbcs-httpd24-curl<0:7.77.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-74.el8

and 68 more

● CVE-2021-20718

Openidc Mod Auth Openidc>=2.4.0<=2.4.7

Fedoraproject Fedora=33

Fedoraproject Fedora=34

Oracle Essbase<21.3

● CVE-2021-3449

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it...

rust/openssl-src<111.15.0

debian/openssl

IBM Cognos Analytics<=12.0.0-12.0.1

IBM Cognos Analytics<=11.2.0-11.2.4 FP2

IBM Cognos Analytics<=11.1.1-11.1.7 FP7

OpenSSL OpenSSL>=1.1.1<1.1.1k

and 202 more

● CVE-2021-22890

curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3...

redhat/jbcs-httpd24<0:1-18.el8

redhat/jbcs-httpd24-apr<0:1.6.3-105.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-82.el8

redhat/jbcs-httpd24-brotli<0:1.0.6-40.el8

redhat/jbcs-httpd24-curl<0:7.77.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-74.el8

and 28 more

● CVE-2021-22876

cURL libcurl could allow a remote attacker to obtain sensitive information, caused by the failure to strip off user credentials from the URL when automatically populating the Referer: HTTP request hea...

redhat/jbcs-httpd24<0:1-18.el8

redhat/jbcs-httpd24-apr<0:1.6.3-105.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-82.el8

redhat/jbcs-httpd24-brotli<0:1.0.6-40.el8

redhat/jbcs-httpd24-curl<0:7.77.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-74.el8

and 34 more

● CVE-2021-23841

WebRTC. A null pointer dereference was addressed with improved input validation.

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 67 more

● CVE-2020-8286

curl. This issue was addressed with improved checks.

redhat/jbcs-httpd24<0:1-18.el8

redhat/jbcs-httpd24-apr<0:1.6.3-105.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-82.el8

redhat/jbcs-httpd24-brotli<0:1.0.6-40.el8

redhat/jbcs-httpd24-curl<0:7.77.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-74.el8

and 67 more

● CVE-2020-1971

A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash res...

redhat/jbcs-httpd24-brotli<0:1.0.6-40.jbcs.el7

redhat/jbcs-httpd24-httpd<0:2.4.37-66.jbcs.el7

redhat/jbcs-httpd24-nghttp2<0:1.39.2-35.jbcs.el7

redhat/jbcs-httpd24-openssl<1:1.1.1g-3.jbcs.el7

redhat/jbcs-httpd24-openssl-chil<0:1.0.0-3.jbcs.el7

redhat/jbcs-httpd24-openssl-pkcs11<0:0.4.10-18.jbcs.el7

and 95 more

● CVE-2020-8285

curl. A buffer overflow was addressed with improved input validation.

redhat/jbcs-httpd24<0:1-18.el8

redhat/jbcs-httpd24-apr<0:1.6.3-105.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-82.el8

redhat/jbcs-httpd24-brotli<0:1.0.6-40.el8

redhat/jbcs-httpd24-curl<0:7.77.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-74.el8

and 105 more

● CVE-2020-8284

curl. This issue was addressed with improved checks.

redhat/jbcs-httpd24<0:1-18.el8

redhat/jbcs-httpd24-apr<0:1.6.3-105.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-82.el8

redhat/jbcs-httpd24-brotli<0:1.0.6-40.el8

redhat/jbcs-httpd24-curl<0:7.77.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-74.el8

and 113 more

● CVE-2020-7760

Node.js codemirror module is vulnerable to a denial of service, caused by a regular expression denial of service (ReDoS) flaw. By using sub-pattern (s|/*.*?*/)*, a remote attacker could exploit this v...

debian/codemirror-js

Codemirror Codemirror<5.58.2

Oracle Application Express<20.2

Oracle Enterprise Manager Express User Interface=19c

Oracle Essbase=21.2

Oracle Hyperion Data Relationship Management<11.2.9.0

and 4 more

● CVE-2019-12402

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service at...

maven/io.github.1tchy.java9modular.org.apache.commons:commons-compress=1.18.1

maven/org.apache.commons:commons-compress>=1.15<1.19

redhat/apache-commons-compress<1.19

Apache Commons Compress>=1.15<=1.18

Fedoraproject Fedora=30

Fedoraproject Fedora=31

and 35 more

● CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This...

redhat/eap7-apache-cxf<0:3.2.11-1.redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-6.SP3_redhat_00004.1.el6ea

redhat/eap7-hal-console<0:3.0.19-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.14-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.18-1.Final_redhat_00001.1.el6ea

redhat/eap7-jackson-annotations<0:2.9.10-1.redhat_00003.1.el6ea

and 779 more

Latest oracle essbase Vulnerabilities

Company

Resources

Contact