Latest oracle mysql enterprise monitor Vulnerabilities

● CVE-2022-22968

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively...

redhat/Spring Framework<5.3.19

redhat/Spring Framework<5.2.21

maven/org.springframework:spring-context<5.2.21

maven/org.springframework:spring-context>=5.3.0<5.3.19

VMware Spring Framework<5.2.0

VMware Spring Framework>=5.2.0<=5.2.20

and 10 more

● CVE-2022-22963

VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

VMware Tanzu Spring Cloud

Vmware Spring Cloud Function<=3.1.6

Vmware Spring Cloud Function>=3.2.0<=3.2.2

Oracle Banking Branch=14.5

Oracle Banking Cash Management=14.5

Oracle Banking Corporate Lending Process Management=14.5

and 42 more

● CVE-2022-22965

Spring Framework JDK 9+ Remote Code Execution Vulnerability

VMware Spring Framework

VMware Spring Framework<5.2.20

VMware Spring Framework>=5.3.0<5.3.18

Cisco CX Cloud Agent<2.1.0

Oracle Communications Cloud Native Core Automated Test Suite=1.9.0

Oracle Communications Cloud Native Core Automated Test Suite=22.1.0

and 84 more

● CVE-2022-23181

The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed ...

redhat/jws5-tomcat<0:9.0.62-9.redhat_00005.1.el7

redhat/jws5-tomcat<0:9.0.62-9.redhat_00005.1.el8

redhat/jws5-tomcat<0:9.0.62-9.redhat_00005.1.el9

debian/tomcat9<=9.0.31-1~deb10u6

Apache Tomcat>=8.5.55<=8.5.73

Apache Tomcat>=9.0.35<=9.0.56

and 24 more

● CVE-2022-23302

JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service...

redhat/log4j<0:1.2.14-6.6.el6_10

redhat/log4j<0:1.2.17-18.el7_4

redhat/log4j<0:1.2.17-17.el7_3

redhat/log4j-eap6<0:1.2.17-3.redhat_00008.1.ep6.el6

redhat/log4j-jboss-logmanager<0:1.1.4-3.Final_redhat_00002.1.ep6.el6

redhat/jboss-as-appclient<0:7.5.24-2.Final_redhat_00001.1.ep6.el6

and 194 more

● CVE-2022-23307

A deserialization flaw was found in Apache log4j 1.2.x. While reading serialized log events, they are improperly deserialized. Note this is the same as <a href="https://access.redhat.com/security/cve...

redhat/log4j<0:1.2.14-6.6.el6_10

redhat/log4j<0:1.2.17-18.el7_4

redhat/log4j<0:1.2.17-17.el7_3

redhat/log4j-eap6<0:1.2.17-3.redhat_00008.1.ep6.el6

redhat/log4j-jboss-logmanager<0:1.1.4-3.Final_redhat_00002.1.ep6.el6

redhat/jboss-as-appclient<0:7.5.24-2.Final_redhat_00001.1.ep6.el6

and 193 more

● CVE-2022-23305

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely...

redhat/log4j<0:1.2.14-6.6.el6_10

redhat/log4j<0:1.2.17-18.el7_4

redhat/log4j<0:1.2.17-17.el7_3

redhat/log4j-eap6<0:1.2.17-3.redhat_00008.1.ep6.el6

redhat/log4j-jboss-logmanager<0:1.1.4-3.Final_redhat_00002.1.ep6.el6

redhat/jboss-as-appclient<0:7.5.24-2.Final_redhat_00001.1.ep6.el6

and 196 more

● CVE-2021-44533

Node.js could allow a remote attacker to bypass security restrictions, caused by the incorrect handling of multi-value Relative Distinguished Names. By crafting certificate subjects containing a singl...

redhat/rh-nodejs12-nodejs<0:12.22.12-2.el7

redhat/rh-nodejs14-nodejs<0:14.20.1-2.el7

debian/nodejs<=10.24.0~dfsg-1~deb10u1<=10.24.0~dfsg-1~deb10u3

IBM Cognos Analytics 11.2.x<=IBM Cognos Analytics 11.2.x

IBM Cognos Analytics 11.1.x<=IBM Cognos Analytics 11.1.x

redhat/node<12.22.9

and 20 more

● CVE-2021-44531

Node.js could allow a remote attacker to bypass security restrictions, caused by the improper handling of URI Subject Alternative Name (SAN) types. An attacker could exploit this vulnerability to bypa...

redhat/rh-nodejs12-nodejs<0:12.22.12-2.el7

redhat/rh-nodejs14-nodejs<0:14.20.1-2.el7

debian/nodejs<=10.24.0~dfsg-1~deb10u1<=10.24.0~dfsg-1~deb10u3

IBM Cognos Analytics 11.2.x<=IBM Cognos Analytics 11.2.x

IBM Cognos Analytics 11.1.x<=IBM Cognos Analytics 11.1.x

redhat/node<12.22.9

and 18 more

● CVE-2021-44532

Node.js could allow a remote attacker to bypass security restrictions, caused by a string injection vulnerability when name constraints were used within a certificate chain. An attacker could exploit ...

redhat/rh-nodejs12-nodejs<0:12.22.12-2.el7

redhat/rh-nodejs14-nodejs<0:14.20.1-2.el7

debian/nodejs<=10.24.0~dfsg-1~deb10u1<=10.24.0~dfsg-1~deb10u3

IBM Cognos Analytics 11.2.x<=IBM Cognos Analytics 11.2.x

IBM Cognos Analytics 11.1.x<=IBM Cognos Analytics 11.1.x

redhat/node<12.22.9

and 19 more

● CVE-2022-21824

Node.js could provide weaker than expected security, caused by an error related to the formatting logic of the console.table() function. An attacker could exploit this vulnerability using console.tabl...

redhat/rh-nodejs12-nodejs<0:12.22.12-2.el7

redhat/rh-nodejs14-nodejs<0:14.20.1-2.el7

debian/nodejs<=10.24.0~dfsg-1~deb10u1

IBM Cognos Analytics 11.2.x<=IBM Cognos Analytics 11.2.x

IBM Cognos Analytics 11.1.x<=IBM Cognos Analytics 11.1.x

redhat/node<12.22.9

and 19 more

● CVE-2021-45105

Apache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el8ea

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el7ea

redhat/rh-sso7-keycloak<0:15.0.6-1.redhat_00001.1.el7

redhat/rh-sso7-keycloak<0:15.0.6-1.redhat_00001.1.el8

debian/apache-log4j2

debian/apache-log4j2<=2.16.0-1~deb10u1<=2.16.0-1<=2.16.0-1~deb11u1

and 217 more

● CVE-2021-4104

Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2

redhat/log4j<0:1.2.14-6.5.el6_10

redhat/log4j<0:1.2.17-17.el7_4

redhat/log4j<0:1.2.17-16.el7_3

redhat/log4j-eap6<0:1.2.17-3.redhat_00008.1.ep6.el6

redhat/log4j-jboss-logmanager<0:1.1.4-3.Final_redhat_00002.1.ep6.el6

redhat/jboss-as-appclient<0:7.5.24-2.Final_redhat_00001.1.ep6.el6

and 219 more

● CVE-2021-41182

### Impact Accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. For example, initializing the datepicker in the following way: ```js...

rubygems/jquery-ui-rails<7.0.0

maven/org.webjars.npm:jquery-ui<1.13.0

nuget/jQuery.UI.Combined<1.13.0

npm/jquery-ui<1.13.0

IBM QRadar SIEM<=7.5.0 GA

IBM QRadar SIEM<=7.4.3 GA - 7.4.3 FP4

and 126 more

● CVE-2021-41183

### Impact Accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. For example, initializing the datepicker in the following way: ```...

ubuntu/jqueryui<1.10.1+dfsg-1ubuntu0.14.04.1~

ubuntu/jqueryui<1.13.0

ubuntu/jqueryui<1.12.1+dfsg-5ubuntu0.18.04.1~

ubuntu/jqueryui<1.12.1+dfsg-5ubuntu0.20.04.1

ubuntu/jqueryui<1.10.1+dfsg-1ubuntu0.16.04.1~

rubygems/jquery-ui-rails<7.0.0

and 116 more

● CVE-2021-3712

OpenSSL could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read when processing ASN.1 strings. By sending specially crafted data, an attacker could exploit this ...

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 79 more

● CVE-2021-3711

OpenSSL is vulnerable to a buffer overflow, caused by improper bounds checking by the EVP_PKEY_decrypt() function within implementation of the SM2 decryption. By sending specially crafted SM2 content,...

debian/openssl

redhat/openssl<1.1.1

IBM Cognos Analytics<=12.0.0-12.0.1

IBM Cognos Analytics<=11.2.0-11.2.4 FP2

IBM Cognos Analytics<=11.1.1-11.1.7 FP7

OpenSSL OpenSSL>=1.1.1<1.1.1l

and 41 more

● CVE-2021-33037

Apache Tomcat is vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially-crafted HTTP(S) transfer-encoding request header,...

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el7

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el7

redhat/jws5-tomcat-vault<0:1.1.8-4.Final_redhat_00004.1.el7

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el8

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el8

redhat/jws5-tomcat-vault<0:1.1.8-4.Final_redhat_00004.1.el8

and 91 more

● CVE-2021-22118

In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a...

maven/org.springframework:spring-web>=5.3.0<=5.3.6

maven/org.springframework:spring-web>=5.2.0<=5.2.14

IBM DRM<=2.0.6

redhat/spring-framework<5.3.7

redhat/spring-framework<5.2.15

VMware Spring Framework>=5.2.0<5.2.15

and 48 more

● CVE-2021-25329

The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely...

redhat/jws5-ecj<0:4.12.0-3.redhat_2.2.el7

redhat/jws5-tomcat<0:9.0.43-11.redhat_00011.1.el7

redhat/jws5-tomcat-native<0:1.2.26-3.redhat_3.el7

redhat/jws5-tomcat-vault<0:1.1.8-2.Final_redhat_00003.1.el7

redhat/jws5-ecj<0:4.12.0-3.redhat_2.2.el8

redhat/jws5-tomcat<0:9.0.43-11.redhat_00011.1.el8

and 69 more

● CVE-2021-25122

A flaw was found in Apache Tomcat. When responding to new h2c connection requests, Apache Tomcat could duplicate request headers and a limited amount of request body from one request to another meanin...

redhat/jws5-ecj<0:4.12.0-3.redhat_2.2.el7

redhat/jws5-tomcat<0:9.0.43-11.redhat_00011.1.el7

redhat/jws5-tomcat-native<0:1.2.26-3.redhat_3.el7

redhat/jws5-tomcat-vault<0:1.1.8-2.Final_redhat_00003.1.el7

redhat/jws5-ecj<0:4.12.0-3.redhat_2.2.el8

redhat/jws5-tomcat<0:9.0.43-11.redhat_00011.1.el8

and 65 more

● CVE-2021-22112

Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in...

Pivotal Software Spring Security<5.2.9

Pivotal Software Spring Security>=5.3.0<5.3.8

Vmware Spring Security>=5.4.0<5.4.4

Oracle Communications Element Manager>=8.2.0<=8.2.4.0

Oracle Communications Interactive Session Recorder=6.3

Oracle Communications Interactive Session Recorder=6.4

and 5 more

● CVE-2021-23841

WebRTC. A null pointer dereference was addressed with improved input validation.

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 67 more

● CVE-2020-17530

Apache Struts Remote Code Execution Vulnerability

Apache Struts

Apache Struts>=2.0.0<2.5.30

Oracle Business Intelligence=12.2.1.3.0

Oracle Business Intelligence=12.2.1.4.0

Oracle Communications Diameter Intelligence Hub=8.0.0

Oracle Communications Diameter Intelligence Hub=8.1.0

and 8 more

● CVE-2020-17527

Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by an issue when the HTTP request header value can be reused from the previous stream received on an HTTP/2 connecti...

redhat/jws5-tomcat<0:9.0.36-9.redhat_8.1.el7

redhat/jws5-tomcat-native<0:1.2.25-3.redhat_3.el7

redhat/jws5-tomcat<0:9.0.36-9.redhat_8.1.el8

redhat/jws5-tomcat-native<0:1.2.25-3.redhat_3.el8

redhat/tomcat<10.0.0

redhat/tomcat<9.0.40

and 65 more

● CVE-2020-26237

A flaw was found in nodejs-highlight-js. Highlight.js is vulnerable to Prototype Pollution. A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prot...

redhat/highlight.js<9.18.2

redhat/highlight.js<10.1.2

Highlightjs Highlight.js Node.js<9.18.2

Highlightjs Highlight.js Node.js>=10.1.0<10.1.2

Debian Debian Linux=9.0

Oracle Mysql Enterprise Monitor<=8.0.30

● CVE-2020-5421

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depen...

maven/org.springframework:spring-framework-bom<4.3.29

maven/org.springframework:spring-framework-bom>=5.0.0<=5.0.18

maven/org.springframework:spring-framework-bom>=5.1.0<=5.1.17

maven/org.springframework:spring-framework-bom>=5.2.0<=5.2.8

IBM Security Directory Suite VA<=8.0.1-8.0.1.19

redhat/springframework<5.2.9

and 80 more

● CVE-2019-0230

Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.

Apache Struts>=2.0.0<=2.5.20

Oracle Communications Policy Management=12.5.0

Oracle Financial Services Data Integration Hub=8.0.3

Oracle Financial Services Data Integration Hub=8.0.6

Oracle Financial Services Market Risk Measurement and Management=8.0.6

IBM Cognos Analytics<=8.0.23

● CVE-2019-0233

An access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when performing a file upload.

Apache Struts>=2.0.0<=2.5.20

Oracle Communications Policy Management=12.5.0

Oracle Financial Services Data Integration Hub=8.0.3

Oracle Financial Services Data Integration Hub=8.0.6

Oracle Financial Services Market Risk Measurement and Management=8.0.6

IBM Cognos Analytics<=8.0.23

● CVE-2020-13935

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could tr...

redhat/tomcat<0:7.0.76-15.el7

redhat/jbossweb<0:7.5.31-2.Final_redhat_2.1.ep6.el5

redhat/jbossweb<0:7.5.31-2.Final_redhat_2.1.ep6.el6

redhat/jboss-as-appclient<0:7.5.24-2.Final_redhat_00001.1.ep6.el6

redhat/jbossas-appclient<0:7.5.24-2.Final_redhat_00001.1.ep6.el6

redhat/jbossas-bundles<0:7.5.24-2.Final_redhat_00001.1.ep6.el6

and 220 more

● CVE-2020-13934

A flaw was found in Apache Tomcat, where an h2c direct connection did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests are made, an OutOfMemoryEx...

redhat/jws5-tomcat<0:9.0.30-5.redhat_6.1.el6

redhat/jws5-tomcat<0:9.0.30-5.redhat_6.1.el7

redhat/jws5-tomcat<0:9.0.30-5.redhat_6.1.el8

redhat/tomcat<10.0.0

redhat/tomcat<9.0.37

redhat/tomcat<8.5.57

and 58 more

● CVE-2020-11996

A specially crafted sequence of HTTP/2 requests could trigger high CPU usage for several seconds. If a sufficient number of such requests were made on concurrent HTTP/2 connections, the server could b...

redhat/jws5-jboss-logging<0:3.4.1-1.Final_redhat_00001.1.el6

redhat/jws5-tomcat<0:9.0.36-6.redhat_5.2.el6

redhat/jws5-tomcat-native<0:1.2.25-2.redhat_2.el6

redhat/jws5-jboss-logging<0:3.4.1-1.Final_redhat_00001.1.el7

redhat/jws5-tomcat<0:9.0.36-6.redhat_5.2.el7

redhat/jws5-tomcat-native<0:1.2.25-2.redhat_2.el7

and 60 more

● CVE-2020-9484

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; a...

redhat/tomcat6<0:6.0.24-115.el6_10

redhat/tomcat<0:7.0.76-12.el7_8

redhat/tomcat7<0:7.0.70-40.ep7.el6

redhat/tomcat8<0:8.0.36-44.ep7.el6

redhat/tomcat-native<0:1.2.23-22.redhat_22.ep7.el6

redhat/tomcat7<0:7.0.70-40.ep7.el7

and 99 more

● CVE-2020-1967

Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signatu...

debian/openssl

OpenSSL OpenSSL>=1.1.1d<=1.1.1f

Debian Debian Linux=9.0

Debian Debian Linux=10.0

FreeBSD FreeBSD=12.1

Fedoraproject Fedora=30

and 33 more

● CVE-2020-1935

Apache Tomcat is vulnerable to HTTP request smuggling, caused by a flaw when handling unusual Transfer-Encoding HTTP header. By sending a specially-crafted request, an attacker could exploit this vuln...

redhat/tomcat<0:7.0.76-16.el7_9

redhat/tomcat<0:7.0.76-11.el7_6

redhat/tomcat<0:7.0.76-12.el7_7

redhat/tomcat7<0:7.0.70-41.ep7.el6

redhat/tomcat8<0:8.0.36-45.ep7.el6

redhat/tomcat7<0:7.0.70-41.ep7.el7

and 75 more

● CVE-2019-17569

redhat/jws5-tomcat<0:9.0.30-3.redhat_4.1.el6

redhat/jws5-tomcat-native<0:1.2.23-4.redhat_4.el6

redhat/jws5-tomcat<0:9.0.30-3.redhat_4.1.el7

redhat/jws5-tomcat-native<0:1.2.23-4.redhat_4.el7

redhat/jws5-tomcat<0:9.0.30-3.redhat_4.1.el8

redhat/jws5-tomcat-native<0:1.2.23-4.redhat_4.el8

and 30 more

● CVE-2020-1938

Apache Tomcat Improper Privilege Management Vulnerability

redhat/tomcat6<0:6.0.24-114.el6_10

redhat/tomcat<0:7.0.76-11.el7_7

redhat/tomcat<0:7.0.76-10.el7_6

redhat/jbossweb<0:7.5.30-2.Final_redhat_2.1.ep6.el5

redhat/glassfish-jsf12-eap6<0:1.2.15-11.b01_SP2_redhat_2.1.ep6.el5

redhat/hornetq<0:2.3.25-29.SP31_redhat_00001.1.ep6.el5

and 265 more

● CVE-2020-5397

Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) e...

maven/org.springframework:spring-webflux>=5.2.0<5.2.3

maven/org.springframework:spring-webmvc>=5.2.0<5.2.3

VMware Spring Framework>=5.2.0<5.2.3

Oracle Application Testing Suite=13.3.0.1

Oracle Communications Brm - Elastic Charging Engine=11.3

Oracle Communications Brm - Elastic Charging Engine=12.0

and 48 more

● CVE-2019-17571

A flaw was discovered in Log4j, where a vulnerable SocketServer class may lead to the deserialization of untrusted data. This flaw allows an attacker to remotely execute arbitrary code when combined w...

maven/org.zenframework.z8.dependencies.commons:log4j-1.2.17=2.0

maven/log4j:log4j>=1.2<=1.2.17

debian/apache-log4j1.2<=1.2.17-5<=1.2.17-7<=1.2.17-8

redhat/log4j<0:1.2.14-6.7.el6_10

redhat/log4j<0:1.2.17-16.el7_4

redhat/log4j<0:1.2.14-19.patch_01.ep5.el5

and 45 more

● CVE-2019-17563

Apache Tomcat could allow a local attacker to hijack a user's session. By using the FORM authentication function, an attacker could exploit this vulnerability to gain access to another user's ...

redhat/tomcat<0:7.0.76-15.el7

redhat/tomcat<0:7.0.76-11.el7_6

redhat/tomcat<0:7.0.76-12.el7_7

redhat/tomcat7<0:7.0.70-38.ep7.el6

redhat/tomcat8<0:8.0.36-42.ep7.el6

redhat/tomcat-native<0:1.2.23-21.redhat_21.ep7.el6

and 30 more

● CVE-2019-1551

OpenSSL could allow a remote attacker to obtain sensitive information, caused by an overflow in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. By performing a man...

redhat/jbcs-httpd24-apr<0:1.6.3-104.jbcs.el6

redhat/jbcs-httpd24-apr-util<0:1.6.1-75.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-38.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-44.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-64.jbcs.el6

redhat/jbcs-httpd24-jansson<0:2.11-53.jbcs.el6

and 40 more

● CVE-2019-1559

OpenSSL could allow a remote attacker to obtain sensitive information, caused by the failure to immediately close the TCP connection after the hosts encounter a zero-length record with valid padding. ...

redhat/openssl<0:1.0.1e-58.el6_10

redhat/openssl<1:1.0.2k-19.el7

redhat/jws5-ecj<0:4.12.0-1.redhat_1.1.el6

redhat/jws5-javapackages-tools<0:3.4.1-5.15.11.el6

redhat/jws5-jboss-logging<0:3.3.2-1.Final_redhat_00001.1.el6

redhat/jws5-tomcat<0:9.0.21-10.redhat_4.1.el6

and 226 more

● CVE-2018-15756

Pivotal Spring Framework is vulnerable to a denial of service, caused by improper handling of range request by the ResourceHttpRequestHandler. By adding a range header with a high number of ranges, a ...

IBM GDE<=3.0.0.2

redhat/springframework<5.0.10

redhat/springframework<4.3.20

VMware Spring Framework>=4.2.0<4.3.20

VMware Spring Framework>=5.0.0<5.0.10

VMware Spring Framework=5.1.0

and 111 more

● CVE-2018-11040

Pivotal Spring Framework could allow a remote attacker to bypass security restrictions, caused by a flaw in AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView. By sending...

IBM GDE<=3.0.0.2

maven/org.springframework:spring-core>=4.3.0<4.3.18

maven/org.springframework:spring-core>=5.0.0<5.0.7

VMware Spring Framework<4.3.18

VMware Spring Framework>=5.0.0<5.0.7

Oracle Agile Product Lifecycle Management=9.3.3

and 48 more

● CVE-2018-11039

Pivotal Spring Framework is vulnerable to cross-site tracing, caused by a flaw in the HiddenHttpMethodFilter in Spring MVC. By persuading a victim to visit a specially-crafted Web site, an attacker co...

IBM GDE<=3.0.0.2

maven/org.springframework:spring-web>=4.3.0<4.3.18

maven/org.springframework:spring-web>=5.0.0<5.0.7

VMware Spring Framework<4.3.18

VMware Spring Framework>=5.0.0<5.0.7

Oracle Agile PLM=9.3.3

and 61 more

Latest oracle mysql enterprise monitor Vulnerabilities

Company

Resources

Contact