Veille CVE

Recherche « Oracle communications analytics »

3 CVE

Critique 2 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Oracle communications analytics » ✕
  1. CVE-2022-22965 9.8 Critique Exploitée

    Spring Framework · Vmware spring framework · Cisco cx cloud agent · Oracle communications cloud native core automated test suite

    A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.

  2. CVE-2020-11023 6.1 Moyenne Exploitée

    jQuery · Jquery jquery · Debian debian linux · Fedoraproject fedora

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

  3. CVE-2019-2725 9.8 Critique Exploitée Rançongiciel

    Oracle Corporation Tape Library ACSLS · Oracle agile product lifecycle management · Oracle communications converged application server · Oracle peoplesoft enterprise peopletools

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).