Oracle Fusion Middleware / Oracle JDeveloper (Woodstox) CVEs

VRT 391,192 CVEs tracked · 15,442 in RASP scope · data as of 20 hours ago

Description contains RASP scope Status Exploitation Severity

Reset

Overview 1 match, all in RASP scope, all CISA SSVC · 0 protected · 0 KEV · 0 public PoC · 0 EPSS ≥ 0.5 · 0 disputed

1match, all in RASP scope, all CISA SSVC 0protected0.0% 0KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0% 0disputed0.0%

Critical 0 0.0% High 1 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

Protected by RASP 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 100.0% No fix identified 0 0.0% Mitigated by environment configuration 0 0.0% Queued for review 0 0.0% Not applicable 0 0.0% Out of RASP scope 0 0.0% Rejected 0 0.0%

blocked by ARMR today 0 0.0% not blocked 1 100.0% not established 0 0.0% unrecorded 0 0.0%

Exploited in the wild 0 0.0% Working exploit published 0 0.0% Proof of concept only 1 100.0% Forecast only 0 0.0% No public exploit 0 0.0%

split by SeverityStatusProtectionExploit maturity peak 1 / month

Sep 22

1 match CSV JSON

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2022-40152	High	2022-09-16	No exploit published	Proof of concept only	Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2022-40152

High

2022-09-16

No exploit published

Proof of concept only

Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.