Latest oracle real user experience insight Vulnerabilities

● CVE-2021-2351

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unau...

Oracle Advanced Networking Option=12.1.0.2

Oracle Advanced Networking Option=12.2.0.1

Oracle Advanced Networking Option=19c

Oracle Agile Engineering Data Management=6.2.1.0

Oracle Agile PLM=9.3.6

Oracle Agile Product Lifecycle Management for Process=6.2.2.0

and 242 more

● CVE-2021-3537

A NULL pointer dereference flaw was found in libxml2, where it did not propagate errors while parsing XML mixed content. This flaw causes the application to crash if an untrusted XML document is parse...

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

redhat/jbcs-httpd24-openssl-chil<0:1.0.0-11.el8

and 36 more

● CVE-2021-3518

libxml2. This issue was addressed with improved checks.

rubygems/nokogiri<1.11.4

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

and 37 more

● CVE-2021-3517

A heap-based buffer overflow was found in libxml2 when processing truncated UTF-8 input. Reference: <a href="https://gitlab.gnome.org/GNOME/libxml2/-/issues/235">https://gitlab.gnome.org/GNOME/libxml...

rubygems/nokogiri<1.11.4

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

and 46 more

● CVE-2021-29425

Apache Commons IO could allow a remote attacker to traverse directories on the system, caused by improper input validation by the FileNameUtils.normalize method. An attacker could send a specially-cra...

redhat/eap7-apache-commons-io<0:2.10.0-1.redhat_00001.1.el6ea

redhat/eap7-hal-console<0:3.2.16-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.20-4.SP2_redhat_00001.1.el6ea

redhat/eap7-ironjacamar<0:1.4.35-1.Final_redhat_00001.1.el6ea

redhat/eap7-jakarta-el<0:3.0.3-2.redhat_00006.1.el6ea

redhat/eap7-jberet<0:1.3.9-1.Final_redhat_00001.1.el6ea

and 185 more

● CVE-2020-24977

GNOME libxml2 is vulnerable to a buffer overflow, caused by improper bounds checking by the xmlEncodeEntitiesInternal function in libxml2/entities.c. By persuading a victim to open a specially-crafted...

IBM Security Verify Access<=10.0.0

Xmlsoft Libxml2=2.9.10

Debian Debian Linux=9.0

Fedoraproject Fedora=31

Fedoraproject Fedora=32

Fedoraproject Fedora=33

and 22 more

● CVE-2019-20388

GNOME libxml2 could allow a remote attacker to obtain sensitive information, caused by a xmlSchemaValidateStream memory leak in xmlSchemaPreRun in xmlschemas.c. By persuading a victim to open a specia...

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el7

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el7

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el7

and 59 more

● CVE-2020-7595

GNOME libxml2 is vulnerable to a denial of service, caused by an error in xmlStringLenDecodeEntities in parser.c. An attacker could exploit this vulnerability to cause the application to enter into an...

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el7

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el7

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el7

and 72 more

● CVE-2019-19956

libxml2 is vulnerable to a denial of service, caused by a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c. By persuading a victim to open a specially crafted file, a remote attacker coul...

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el7

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el7

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el7

and 35 more

● CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This...

redhat/eap7-apache-cxf<0:3.2.11-1.redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-6.SP3_redhat_00004.1.el6ea

redhat/eap7-hal-console<0:3.0.19-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.14-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.18-1.Final_redhat_00001.1.el6ea

redhat/eap7-jackson-annotations<0:2.9.10-1.redhat_00003.1.el6ea

and 779 more

● CVE-2018-15769

RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially ...

Dell Bsafe>=4.0.0<4.0.11

Dell Bsafe>=4.1.0<4.1.6.2

Oracle Application Testing Suite=13.3.0.1

Oracle Communications Analytics=12.1.1

Oracle Communications Ip Service Activator=7.3.0

Oracle Communications Ip Service Activator=7.4.0

and 18 more

● CVE-2018-11058

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read v...

Dell Bsafe>=4.0.0<4.0.11

Dell Bsafe>=4.1.0<4.1.6

Dell Bsafe Crypto-c>=4.0.0<4.0.5.3

Oracle Application Testing Suite=13.3.0.1

Oracle Communications Analytics=12.1.1

Oracle Communications Ip Service Activator=7.3.0

and 19 more

● CVE-2018-11057

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher ...

Dell Bsafe>=4.0.0<4.0.11

Dell Bsafe>=4.1.0<4.1.6.1

Oracle Application Testing Suite=13.3.0.1

Oracle Communications Analytics=12.1.1

Oracle Communications Ip Service Activator=7.3.0

Oracle Communications Ip Service Activator=7.4.0

and 18 more

● CVE-2018-11054

RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to potentially cause a Denial Of Service.

Dell Bsafe=4.1.6

Oracle Application Testing Suite=13.3.0.1

Oracle Communications Analytics=12.1.1

Oracle Communications Ip Service Activator=7.3.4

Oracle Communications Ip Service Activator=7.4.0

Oracle Core Rdbms=11.2.0.4

and 17 more

● CVE-2018-11055

Dell Bsafe>=4.0.0<4.0.11

Dell Bsafe>=4.1.0<4.1.6.1

Oracle Application Testing Suite=13.3.0.1

Oracle Communications Analytics=12.1.1

Oracle Communications Ip Service Activator=7.3.0

Oracle Communications Ip Service Activator=7.4.0

and 18 more

● CVE-2018-11056

RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption ('Resource Exhaustion...

Dell Bsafe>=4.1.0<4.1.6.1

Dell Bsafe Crypto-c>=4.0.0<4.0.5.3

Oracle Application Testing Suite=13.3.0.1

Oracle Communications Analytics=12.1.1

Oracle Communications Ip Service Activator=7.3.0

Oracle Communications Ip Service Activator=7.4.0

and 18 more

Latest oracle real user experience insight Vulnerabilities

Company

Resources

Contact