Latest oracle storagetek tape analytics sw tool Vulnerabilities

● CVE-2020-5421

In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depen...

maven/org.springframework:spring-framework-bom<4.3.29

maven/org.springframework:spring-framework-bom>=5.0.0<=5.0.18

maven/org.springframework:spring-framework-bom>=5.1.0<=5.1.17

maven/org.springframework:spring-framework-bom>=5.2.0<=5.2.8

IBM Security Directory Suite VA<=8.0.1-8.0.1.19

redhat/springframework<5.2.9

and 80 more

● CVE-2020-11023

### Impact Passing HTML containing `<option>` elements from untrusted sources - even after sanitizing them - to one of jQuery's DOM manipulation methods (i.e. `.html()`, `.append()`, and others) may e...

maven/org.webjars.npm:jquery>=1.0.3<3.5.0

nuget/jQuery>=1.0.3<3.5.0

rubygems/jquery-rails<4.4.0

npm/jquery>=1.0.3<3.5.0

debian/jquery

debian/node-jquery<=2.2.4+dfsg-4

and 105 more

● CVE-2020-9488

Apache Log4j is vulnerable to a man-in-the-middle attack, caused by improper certificate validation with host mismatch in the SMTP appender. An attacker could exploit this vulnerability to launch a ma...

debian/apache-log4j2

redhat/qpid-cpp<0:1.36.0-31.el6_10a

redhat/qpid-proton<0:0.32.0-1.el6_10

redhat/qpid-cpp<0:1.36.0-31.el7a

redhat/qpid-proton<0:0.32.0-2.el7

redhat/nodejs-rhea<0:1.0.24-1.el8

and 110 more

● CVE-2019-3738

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce two...

Dell Bsafe Cert-j<=6.2.4

Dell BSAFE Crypto-J<6.2.5

Dell BSAFE SSL-J<=6.2.4.1

McAfee Threat Intelligence Exchange Server>=2.0.0<=2.3.1

McAfee Threat Intelligence Exchange Server=3.0.0

Oracle Application Performance Management=13.3.0.0

and 36 more

● CVE-2019-3739

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially ...

Dell Bsafe Cert-j<=6.2.4

Dell BSAFE Crypto-J<6.2.5

Dell BSAFE SSL-J<=6.2.4.1

Oracle Application Performance Management=13.3.0.0

Oracle Application Performance Management=13.4.0.0

Oracle Communications Network Integrity=7.3.2

and 33 more

● CVE-2019-3740

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially...

Dell Bsafe Cert-j<=6.2.4

Dell BSAFE Crypto-J<6.2.5

Dell BSAFE SSL-J<=6.2.4.1

Oracle Application Performance Management=13.3.0.0

Oracle Application Performance Management=13.4.0.0

Oracle Communications Network Integrity=7.3.2

and 41 more

● CVE-2019-2729

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily e...

Oracle Communications Diameter Signaling Router=8.0

Oracle Communications Diameter Signaling Router=8.1

Oracle Communications Diameter Signaling Router=8.2

Oracle Communications Diameter Signaling Router=8.2.1

Oracle Communications Network Integrity>=7.3.2<=7.3.6

Oracle Hyperion Infrastructure Technology=11.1.2.4

and 13 more

● CVE-2019-2725

Oracle WebLogic Server, Injection

Oracle Agile PLM=9.3.3

Oracle Agile PLM=9.3.4

Oracle Agile PLM=9.3.5

Oracle Communications Converged Application Server=5.1

Oracle Communications Converged Application Server=7.0

Oracle Communications Converged Application Server=7.1

and 13 more

● CVE-2020-10683

dom4j could allow a remote authenticated attacker to obtain sensitive information, caused by an XML external entity (XXE) error when processing XML data. By sending specially crafted XML data, a remot...

redhat/eap7-dom4j<0:2.1.3-1.redhat_00001.1.el6ea

redhat/eap7-elytron-web<0:1.2.5-1.Final_redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-13.SP3_redhat_00011.1.el6ea

redhat/eap7-hal-console<0:3.0.23-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.17-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.20-1.Final_redhat_00001.1.el6ea

and 204 more

● CVE-2019-11358

A Prototype Pollution vulnerability was found in jquery. Untrusted JSON passed to the `extend` function could lead to modifying objects up the prototype chain, including the global Object. A crafted J...

redhat/ansible-tower<0:3.5.2-1.el7a

redhat/cfme<0:5.10.9.1-1.el7cf

redhat/cfme-amazon-smartstate<0:5.10.9.1-1.el7cf

redhat/cfme-appliance<0:5.10.9.1-1.el7cf

redhat/cfme-gemset<0:5.10.9.1-1.el7cf

redhat/ovirt-ansible-hosted-engine-setup<0:1.0.23-1.el7e

and 267 more

Latest oracle storagetek tape analytics sw tool Vulnerabilities

Company

Resources

Contact